Container and Native Deployment

Choose JVM or native from measured startup, memory, throughput, and build constraints.

Container image

• Prefer the Spring Boot build-image task with Cloud Native Buildpacks for standard services.
• Keep dependency and application layers separate to maximize cache reuse.
• Pin builder and run-image families in reproducible release pipelines.
• Run as a non-root user on a read-only filesystem where the application permits it.
• Supply secrets at runtime; never bake credentials or environment files into an image.
• Configure graceful shutdown and align platform termination grace with application timeouts.

Runtime behavior

• Set memory and CPU limits, then verify JVM ergonomics inside those limits.
• Expose dedicated readiness and liveness probes through Actuator.
• Keep startup probes for slow initialization instead of weakening liveness.
• Write temporary files only under an explicit writable location.