kubeconform
kubeconform.mandragor.org
What it is
Kubeconform is a command-line tool for validating Kubernetes manifests before deployment. It checks files against Kubernetes OpenAPI specifications, helping catch configuration problems before they reach a cluster. Validation and schema downloads run concurrently, and downloaded files are cached in memory. By default, it uses a self-updating fork of the Kubernetes JSON schema registry to supply schemas for recent Kubernetes versions. For custom resources, users can point it to local or remote schemas; local schemas also make offline validation possible. Results can be produced as JSON, JUnit, TAP, or plain text. Documentation describes using its Docker images in GitHub Actions and GitLab CI, and the images are published to GitHub Container Registry. It is free, with a listed plan of free. Installation instructions cover Linux, macOS through Homebrew, and Windows. Its checks do not cover additional server-side validation, and its Go module interface is still work in progress and unstable.
Spec sheet
- Purpose
- Kubeconform validates Kubernetes manifests so users can catch broken configuration before deploying.Read 4 Oct 2026 · kubeconform.mandragor.org
- License
- The GitHub repository identifies the project license as Apache-2.0.Read 4 Oct 2026 · github.com
- CI integrations
- The documentation shows using Kubeconform with GitHub Actions and GitLab CI through its Docker images.Read 4 Oct 2026 · github.com
- Custom resources
- Users can configure remote or local schema locations to validate custom resources and support offline validation.Read 4 Oct 2026 · kubeconform.mandragor.org
- Docker registry
- Kubeconform publishes Docker images to GitHub Container Registry for use in CI workflows.Read 4 Oct 2026 · kubeconform.mandragor.org
- Installation
- The official installation guide documents Linux, macOS via Homebrew, and Windows downloads.Read 4 Oct 2026 · kubeconform.mandragor.org
- Library status
- The Go module interface is described as work in progress and not yet stable.Read 4 Oct 2026 · github.com
- Output formats
- The command line supports JSON, JUnit, TAP, and text output formats.Read 4 Oct 2026 · kubeconform.mandragor.org
- Performance
- It validates and downloads manifests concurrently and caches downloaded files in memory.Read 4 Oct 2026 · kubeconform.mandragor.org
- Pricing caveat
- The GitHub Action documentation says GitHub Container Registry bandwidth was free during its beta and might incur costs afterward.Read 4 Oct 2026 · kubeconform.mandragor.org
- Schemas
- It uses a self-updating fork of the Kubernetes JSON schema registry by default to provide schemas for recent Kubernetes versions.Read 4 Oct 2026 · kubeconform.mandragor.org
- Validation limit
- Kubeconform checks manifests against Kubernetes OpenAPI specifications, so additional server-side validations are outside its coverage.Read 4 Oct 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Concurrent manifest validation and schema downloads
- Supports local schemas for offline validation
- Offers JSON, JUnit, TAP, and text output
- Free plan listed at free
Limits
- Additional server-side validations are outside its coverage
- Go module interface is not yet stable
- Registry bandwidth may incur costs after its beta
Who it suits
Kubeconform suits teams and individuals who validate Kubernetes manifests locally or in CI, including configurations with custom resources. It is aimed at specification checks rather than additional server-side validation.
Verdict
Kubeconform provides a focused way to check Kubernetes manifests against OpenAPI specifications, with useful output and schema options. Readers needing server-side checks or a stable Go module interface should account for those limits.
Where Specifiction places it
- Infrastructure Testing Tools#14 of 287.7