kubeval

kubeval copied to clipboard

Secret is validated as ok even when it's not base64

1

Given this invalid secret definition: ``` apiVersion: v1 kind: Secret metadata: name: mylittlesecret type: Opaque data: somesecret: dummy ``` kubectl would fail as data needs to be base64 encrypted while...

fpytloun

False Validation on ConfigMap and Secret when name contains _

1

Hi, What happens: If you try to validate a ConfigMap or Secret file which has a name with _ (db_env f.e.) it returns true. Later, if you try to apply...

joshiraez

Got 404 when validating with `-v`

1

~~~plain $ kubeval --version Version: 0.10.0 Commit: bc9ab56cc345f67265b8fb01b03489170fd0e504 Date: 2019-06-09T17:38:35Z ~~~ ~~~plain $ kubeval test.yaml -v 1.7.0 1 error occurred: * Failed initalizing schema https://kubernetesjsonschema.dev/v1.7.0-standalone/service-v1.json: Could not read schema from...

fleeto

Invalid CPU limit is not flagged - probably an upstream thing

1

This is related to #22 and #161 , but I believe it is distinct. I had a typo in a `cpu` request, and the value was `1000ms` instead of `1000m`....

sam-writer

kubeval doesn't stop if job restartPolicy is wrong

7

We have some Job configuration and we expect `kubeval` to stop us if developers provide wrong settings. However, kubeval (0.15.0) simply ignored and at the final step we got an...

icy

Option --ignored-filename-patterns does not work with globs

2

The option `--ignored-filename-patterns` does not work when using globs: ```bash $ kubeval --version Version: 0.15.0 Commit: df50ea7fd4fd202458002a40a6a39ffbb3125bad $ kubeval --ignored-filename-patterns kustomizations kubernetes/**/*.yaml | grep kustomi ERR - kubernetes/base/kustomization.yaml: Missing 'metadata'...

fabioperrella

Use official docker image instead of fetching binary files from GH. Setting empty entrypoint is needed to mitigate issues such as * ERR - unknown shorthand flag: 'c' in -c'

nvtkaszpir

Each time `kubeval` is executed are the k8s schemas downloaded from https://kubernetesjsonschema.dev. It would be great if the fetched schemas could be cached to disk. The cache could be cleared...

jeroenrinzema

I have a file with a lot of resources called `resources.yaml`, inside of this file I have one configmap with 800 lines of content. When using a pipe with kubeval...

JuanSeBestia

Should not PASS on empty input

3

Considering that kubeval is probably run mostly in CI pipelines, I think it is funny that kubeval exits with 0 when it gets an empty input. Do you guys consider...

ambis