Summary
In this chapter, we went through some of the options we have to statically analyze Kubernetes YAML manifests. We saw how we can generate manifests from templating engines such as Helm or Kustomize, and then we checked some tools that can perform several types of jobs: kubeconform
will validate your manifests against the OpenAPI Kubernetes schema, kube-score
will check that you follow a predefined list of best practices, while conftest
can do everything because it allows you to define your own rules and policies for the manifests to follow. All these validations can be easily added to your CI pipeline, and we have seen examples of how to use them directly with their container images.
In the next chapter, we will take a close look at what the future might bring for Argo CD and how it can be used to democratize and standardize GitOps with GitOps Engine, an innovative project built with the help of other organizations from the community that is already seeing some good adoption...