Builds a Deployment (rolling update, hardened security context, resource requests/limits, HTTP readiness/liveness probes), a Service, an optional Ingress with cert-manager TLS, and a ConfigMap from the KEY=value lines — as one multi-document YAML with app.kubernetes.io labels. Names, namespaces, images, ports and quantities are validated before anything is emitted. Text only: apply it with kubectl after review.