Freedom251 › Infrastructure Testing Tools
kubeconform
What kubeconform is
Kubeconform is a free command-line tool for checking Kubernetes manifests before deployment. It validates manifests against Kubernetes OpenAPI specifications and can process validation and schema downloads concurrently, caching downloaded files in memory. By default, it uses a self-updating fork of the Kubernetes JSON schema registry to provide schemas for recent Kubernetes versions. Users can set local or remote schema locations for custom resources, including for offline validation.
The command line can produce JSON, JUnit, TAP, or text output. Documentation covers using Kubeconform with GitHub Actions and GitLab CI through Docker images published to GitHub Container Registry. Installation instructions cover Linux, macOS through Homebrew, and Windows downloads. The project is licensed under Apache-2.0, and no paid plans or usage limits are stated. Its checks do not cover additional server-side validations, which fall outside Kubernetes OpenAPI specification checks. The Go module interface is described as work in progress and not yet stable. Documentation also notes that GitHub Container Registry bandwidth was free during its beta and might incur costs afterward.
Who it suits
Kubeconform suits developers who want to validate Kubernetes manifests locally or in CI before deployment. It runs on Linux, macOS, Windows, and self-hosted environments.
What it does well
- Free command-line manifest validation
- Supports local or remote schemas for custom resources
- Offers JSON, JUnit, TAP, and text output
- Documentation covers GitHub Actions and GitLab CI
What to know first
- Additional server-side validations are outside its coverage
- The Go module interface is not yet stable
- GitHub Container Registry bandwidth might incur costs after beta
Limits
The free plan is listed as free, with no paid plans or usage limits stated. Validation covers Kubernetes OpenAPI specifications; additional server-side validations are outside its coverage. The Go module interface is still a work in progress and is not stable.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Kubeconform | No paid plans or usage limits stated on the official site | Free |
As kubeconform.mandragor.org lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the Kubeconform website and installation guide.
- Choose the documented installation route for Linux, macOS through Homebrew, or Windows.
- Configure local or remote schema locations if you need custom resource validation.
- Run the command line and select JSON, JUnit, TAP, or text output as needed.
- For CI, use the documented Docker images with GitHub Actions or GitLab CI.
Verdict
Kubeconform provides specification-based checks for Kubernetes manifests, with options for custom schemas and CI workflows. It does not replace additional server-side validation, and its Go module interface remains a work in progress.
Questions
How much does Kubeconform cost?
Its listed Kubeconform plan is free. No paid plans or usage limits are stated.
What platforms does it support?
The listed platforms are Linux, macOS, self-hosted, and Windows. Installation guidance includes Linux, macOS through Homebrew, and Windows downloads.
Can Kubeconform validate custom resources offline?
Yes. Users can configure local schema locations for custom resources, which support offline validation.
What output formats are available?
The command line supports JSON, JUnit, TAP, and text output.
What license does it use?
The GitHub repository identifies the project license as Apache-2.0.
Does it cover server-side validation?
Its checks are against Kubernetes OpenAPI specifications. Additional server-side validations are outside its coverage.
Facts from kubeconform's own pages
- CI integrations
- The documentation shows using Kubeconform with GitHub Actions and GitLab CI through its Docker images. · github.com, 4 Oct 2026
- Custom resources
- Users can configure remote or local schema locations to validate custom resources and support offline validation. · kubeconform.mandragor.org, 4 Oct 2026
- Docker registry
- Kubeconform publishes Docker images to GitHub Container Registry for use in CI workflows. · kubeconform.mandragor.org, 4 Oct 2026
- Installation
- The official installation guide documents Linux, macOS via Homebrew, and Windows downloads. · kubeconform.mandragor.org, 4 Oct 2026
- Library status
- The Go module interface is described as work in progress and not yet stable. · github.com, 4 Oct 2026
- License
- The GitHub repository identifies the project license as Apache-2.0. · github.com, 4 Oct 2026
- Output formats
- The command line supports JSON, JUnit, TAP, and text output formats. · kubeconform.mandragor.org, 4 Oct 2026
- Performance
- It validates and downloads manifests concurrently and caches downloaded files in memory. · kubeconform.mandragor.org, 4 Oct 2026
- Pricing caveat
- The GitHub Action documentation says GitHub Container Registry bandwidth was free during its beta and might incur costs afterward. · kubeconform.mandragor.org, 4 Oct 2026
- Purpose
- Kubeconform validates Kubernetes manifests so users can catch broken configuration before deploying. · kubeconform.mandragor.org, 4 Oct 2026
- Schemas
- It uses a self-updating fork of the Kubernetes JSON schema registry by default to provide schemas for recent Kubernetes versions. · kubeconform.mandragor.org, 4 Oct 2026
- Validation limit
- Kubeconform checks manifests against Kubernetes OpenAPI specifications, so additional server-side validations are outside its coverage. · github.com, 4 Oct 2026
Where kubeconform stands on Freedom251
- Infrastructure Testing Tools#12 of 28