- Home
- Infrastructure Testing Tools
- kubeconform
kubeconform
What it is
Kubeconform is a free command-line tool for checking Kubernetes manifests before deployment. It validates manifests against Kubernetes OpenAPI specifications and can process validation and schema downloads concurrently, caching downloaded files in memory. By default, it uses a self-updating fork of the Kubernetes JSON schema registry to provide schemas for recent Kubernetes versions. Users can configure local or remote schema locations for custom resources; local schemas also allow offline validation. Results can be emitted as JSON, JUnit, TAP, or text. Documentation covers using the tool with GitHub Actions and GitLab CI through Docker images published to GitHub Container Registry. Installation instructions cover Linux, macOS through Homebrew, and Windows downloads. Kubeconform is licensed under Apache-2.0, with no paid plans or usage limits stated. Its checks are limited to Kubernetes OpenAPI specifications, so additional server-side validations are outside its coverage. The project describes its Go module interface as work in progress and not yet stable. GitHub Actions documentation says registry bandwidth was free during its beta and might incur costs afterward.
For and against
For
- Free, Apache-2.0 licensed tool.
- Supports JSON, JUnit, TAP, and text output.
- Custom local schemas can support offline validation.
- Installation instructions cover Linux, macOS, and Windows.
- Can validate manifests concurrently.
Against
- Checks do not cover additional server-side validations.
- Go module interface is not yet stable.
- GitHub Container Registry bandwidth might incur costs after beta.
The verdict
Kubeconform provides free specification-based checks for Kubernetes manifests, with several output formats and CI workflow options. Its scope does not include additional server-side validation, and its Go module interface remains unstable.
Who it suits
Kubeconform suits users who want a local command-line check for Kubernetes manifests, including teams using GitHub Actions or GitLab CI. It can also fit workflows requiring custom schemas or offline validation.
Plans and prices
Kubeconform
No paid plans or usage limits stated on the official site
Read 4 Oct 2026 · kubeconform.mandragor.org
On the record
- CI integrations
- The documentation shows using Kubeconform with GitHub Actions and GitLab CI through its Docker images.github.com · read 4 Oct 2026
- Custom resources
- Users can configure remote or local schema locations to validate custom resources and support offline validation.kubeconform.mandragor.org · read 4 Oct 2026
- Docker registry
- Kubeconform publishes Docker images to GitHub Container Registry for use in CI workflows.kubeconform.mandragor.org · read 4 Oct 2026
- Installation
- The official installation guide documents Linux, macOS via Homebrew, and Windows downloads.kubeconform.mandragor.org · read 4 Oct 2026
- Library status
- The Go module interface is described as work in progress and not yet stable.github.com · read 4 Oct 2026
- License
- The GitHub repository identifies the project license as Apache-2.0.github.com · read 4 Oct 2026
- Output formats
- The command line supports JSON, JUnit, TAP, and text output formats.kubeconform.mandragor.org · read 4 Oct 2026
- Performance
- It validates and downloads manifests concurrently and caches downloaded files in memory.kubeconform.mandragor.org · read 4 Oct 2026
- Pricing caveat
- The GitHub Action documentation says GitHub Container Registry bandwidth was free during its beta and might incur costs afterward.kubeconform.mandragor.org · read 4 Oct 2026
- Purpose
- Kubeconform validates Kubernetes manifests so users can catch broken configuration before deploying.kubeconform.mandragor.org · read 4 Oct 2026
- Schemas
- It uses a self-updating fork of the Kubernetes JSON schema registry by default to provide schemas for recent Kubernetes versions.kubeconform.mandragor.org · read 4 Oct 2026
- Validation limit
- Kubeconform checks manifests against Kubernetes OpenAPI specifications, so additional server-side validations are outside its coverage.github.com · read 4 Oct 2026
