create secure, robust k8s resource defintion

configuration must be improved in several ways to
* ensure secure defaults
* ensure high availability

This includes but is not limited to:
* replicas
* affinity
* securityContext
* resources