Kubeconform is a Kubernetes manifest validator that validates configuration files against JSON schemas derived from Kubernetes OpenAPI specifications.
The tool addresses the need to catch configuration errors before deployment by validating manifests against official Kubernetes schemas. It works by downloading or referencing JSON schema definitions and checking manifest files against them. The project is inspired by Kubeval but improves upon it through parallel validation across multiple routines with in-memory caching of downloaded schemas, configurable schema locations for both remote and local sources, and use of a maintained fork of the kubernetes-json-schema registry that stays current with recent Kubernetes versions.
Kubeconform suits teams that want fast local validation in development workflows or integrated validation in CI pipelines. It is particularly valuable for projects using custom resources, as it supports CustomResourceDefinition validation through configurable schema locations, and for teams needing offline validation capabilities. The tool also supports OpenShift schemas. Developers should be aware that Kubeconform validates only against the official OpenAPI specifications and does not replicate server-side validations performed by Kubernetes controllers; the README recommends using kubectl with the --dry-run=server flag to cover that gap.
The project maintains active engagement with issues and pull requests, regularly updates its schema fork to track recent Kubernetes releases, and provides integration examples for common CI systems including GitHub Actions and GitLab CI. The codebase is available for use as a Go module, allowing integration into other tools and workflows.
