k8s/
├── base/
│   ├── deployment.yaml       # Deployment with health probes, resource limits
│   ├── service.yaml          # ClusterIP service
│   ├── configmap.yaml        # Non-sensitive configuration
│   ├── hpa.yaml              # Horizontal Pod Autoscaler
│   └── kustomization.yaml
└── overlays/
    ├── dev/
    │   └── kustomization.yaml
    └── production/
        ├── kustomization.yaml
        └── ingress.yaml      # Ingress with TLS
