A Deep Dive Into Kubernetes Schema Validation

• enhancements

  61 3,302 9.7 Go

  Enhancements tracking repo for Kubernetes

  

Verifying the state of Kubernetes manifests may seem like a trivial task, because the Kubernetes CLI (kubectl) has the ability to verify resources before they’re applied to a cluster. You can verify the schema by using the dry-run flag (--dry-run=client/server) when specifying the kubectl create or kubectl apply commands, which will perform the validation without applying Kubernetes resources to the cluster.

• kubeval

  7 3,143 0.0 Go

  Validate your Kubernetes configuration files, supports multiple Kubernetes versions

  

Kubeval and kubeconform are command-line tools that were developed with the intent to validate Kubernetes manifests without the requirement of having a running Kubernetes environment. Because kubeconform is based on kubeval, they operate similarly — verification is performed against pre-generated JSON schemas that are created from the OpenAPI specifications (swagger.json) for each particular Kubernetes version. All that remains to run the schema validation tests is to point the tool executable to a single manifest, directory or pattern.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• kubeconform

  4 1,985 5.5 Go

  A FAST Kubernetes manifests validator, with support for Custom Resources!

Kubeval and kubeconform are command-line tools that were developed with the intent to validate Kubernetes manifests without the requirement of having a running Kubernetes environment. Because kubeconform is based on kubeval, they operate similarly — verification is performed against pre-generated JSON schemas that are created from the OpenAPI specifications (swagger.json) for each particular Kubernetes version. All that remains to run the schema validation tests is to point the tool executable to a single manifest, directory or pattern.

• kubernetes-schema-validation

  1 6 0.0

  resources for the blog post about Kubernetes schema validation

  

Kubeval and kubeconform are command-line tools that were developed with the intent to validate Kubernetes manifests without the requirement of having a running Kubernetes environment. Because kubeconform is based on kubeval, they operate similarly — verification is performed against pre-generated JSON schemas that are created from the OpenAPI specifications (swagger.json) for each particular Kubernetes version. All that remains to run the schema validation tests is to point the tool executable to a single manifest, directory or pattern.

• hyperfine

  75 20,338 7.8 Rust

  A command-line benchmarking tool

I used hyperfine to benchmark the execution time of each tool4. First I ran it against (1) all the files with misconfigurations (seven files in total), and then I ran it against (2) 100 Kubernetes files (all the files contain the same config).

• kubernetes-json-schema

  4 293 0.0

  Schemas for every version of every object in every version of Kubernetes

  

Kubeval - instrumenta/kubernetes-json-schema (last commit: 133f848 on April 29, 2020)

• kubernetes-json-schema

  3 333 8.0

  JSON Schemas for every version of every object in every version of Kubernetes (by yannh)

Kubeconform - yannh/kubernetes-json-schema (last commit: a660f03 on May 15, 2021)

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project