Author production-grade K8s workloads (Deployment, Service, Ingress, ConfigMap, Secret, HPA, PDB, NetworkPolicy), package them as Helm charts with `values.schema.json` validation, and layer env-specific patches via Kustomize overlays. Includes Velero backups, Kyverno admission policies, and vCluster ephemeral preview envs.
