Manifest and platform checks

Opening your lesson

YAML syntax is only the first validation boundary. A document can parse and still use an unsupported API version, a wrong field type or a workload policy that violates its request. Validate the resource shape, then inspect the applied object and the controller result. Some cluster-wide mechanisms are modeled only as declarations here: a quota limits namespace totals and a service account supplies a workload identity, while production authorization and admission need their own policy checks. These tasks repair an API version, limit automatic token mounting, set a namespace budget and preserve availability through rollout settings. Read the error before changing unrelated application fields.

printf '%s' 'apiVersion: "apps/v1"
kind: "Deployment"
metadata:
  name: "cobalt-322"
spec:
  replicas: 2
  selector:
    matchLabels:
      app: "cobalt-322"
  template:
    metadata:
      labels:
        app: "cobalt-322"
    spec:
      containers:
        - name: "cobalt-322"
          image: "nginx:1.27"
          ports:
            - containerPort: 80
' > 'workload.yaml'
kubectl apply -f workload.yaml

A valid YAML document can still use a removed API or the wrong field type. apps/v1 Deployment replicas must be an integer.

Choose your character

Your Work Gym account