# Kubernetes

Source: https://zshot-cli.com/reference/docker/kubernetes/
Markdown: https://zshot-cli.com/reference/docker/kubernetes/index.md
Section: [Reference](https://zshot-cli.com/reference/) › [Docker](https://zshot-cli.com/reference/docker/)

Runs `scaleassembly/zshot-server` as a Deployment from [kubernetes.yml](/reference/docker/files/kubernetes): one replica as a non-root user with every capability dropped and a read-only root filesystem, readiness and liveness probes on [`/status`](/reference/server/api), and a Service on port 3000. It requests 1 GiB of memory and limits the pod to 2 GiB; size it for your renders with [`--server-max-concurrency`](/reference/flags/server/server-max-concurrency). The manifest is exercised against every release.

The license comes from a Secret named `zshot-license`, which you create. Add `--from-literal=ZSHOT_SERVER_TOKEN_AUTH=YOUR-TOKEN` to require a bearer token on every request.

```sh
kubectl create secret generic zshot-license --from-literal=ZSHOT_LICENSE=YOUR-KEY
kubectl apply -f https://zshot-cli.com/deploy/kubernetes.yml
```

## Sandbox

The pod runs with no seccomp filter, which lets Chromium's [sandbox](/reference/docker/hardening) start; `RuntimeDefault` blocks it. A namespace that enforces the restricted Pod Security Standard refuses an unfiltered pod, so there, place [zshot-seccomp.json](/reference/docker/files/zshot-seccomp) on each node and name it in the pod's `seccompProfile` as `Localhost`.

## Related

Flags:

- [`--server`](https://zshot-cli.com/reference/flags/server/server/)
- [`--server-max-concurrency`](https://zshot-cli.com/reference/flags/server/server-max-concurrency/)

Topics:

- [Hardening](https://zshot-cli.com/reference/docker/hardening/)
- [kubernetes.yml](https://zshot-cli.com/reference/docker/files/kubernetes/) — Deployment and Service
- [zshot-seccomp.json](https://zshot-cli.com/reference/docker/files/zshot-seccomp/) — The seccomp profile

## Navigation

- [Examples](https://zshot-cli.com/examples/)
- [Download](https://zshot-cli.com/download/)
- [Purchase](https://zshot-cli.com/purchase/)
- [Reference](https://zshot-cli.com/reference/)
  - [Formats](https://zshot-cli.com/reference/formats/)
  - [Flags](https://zshot-cli.com/reference/flags/)
  - [Agents](https://zshot-cli.com/reference/agents/)
  - [Configuration](https://zshot-cli.com/reference/configuration/)
  - [Crawling](https://zshot-cli.com/reference/crawling/)
  - [Docker](https://zshot-cli.com/reference/docker/)
    - [Environment](https://zshot-cli.com/reference/docker/environment/)
    - [Hardening](https://zshot-cli.com/reference/docker/hardening/)
    - **Kubernetes**
    - [Railway](https://zshot-cli.com/reference/docker/railway/)
    - [Files](https://zshot-cli.com/reference/docker/files/)
  - [Exit Codes](https://zshot-cli.com/reference/exit_codes/)
  - [Linux](https://zshot-cli.com/reference/linux/)
  - [LLM Connections](https://zshot-cli.com/reference/llm_connections/)
  - [LLM Formatting](https://zshot-cli.com/reference/llm_formatting/)
  - [Local Inputs](https://zshot-cli.com/reference/inputs/)
  - [Navigator](https://zshot-cli.com/reference/navigator/)
  - [Security](https://zshot-cli.com/reference/security/)
  - [Server](https://zshot-cli.com/reference/server/)
  - [Shell completions](https://zshot-cli.com/reference/shell_completions/)
  - [Storage](https://zshot-cli.com/reference/storage/)
  - [Timeouts](https://zshot-cli.com/reference/timeouts/)
  - [Web Bot Auth](https://zshot-cli.com/reference/web_bot_auth/)
- [Support](https://zshot-cli.com/support/)
- [Changelog](https://zshot-cli.com/changelog/)

Site index: https://zshot-cli.com/llms.txt