kubeconform
Kubeconform is a free command-line tool for checking Kubernetes manifests before deployment.
What kubeconform is
Kubeconform is a free command-line tool for checking Kubernetes manifests before deployment. It validates files against Kubernetes OpenAPI specifications, processes validations and schema downloads concurrently, and caches downloaded files in memory. By default, it uses a self-updating fork of the Kubernetes JSON schema registry to provide schemas for recent Kubernetes versions. Users can configure local or remote schema locations for custom resources, including for offline validation. Results can be produced in JSON, JUnit, TAP, or text formats. The documentation covers using Kubeconform with GitHub Actions and GitLab CI through Docker images published to GitHub Container Registry. Installation instructions cover Linux, macOS through Homebrew, and Windows downloads. The project is licensed under Apache-2.0, with no paid plans or usage limits stated. Its checks do not include additional server-side validations beyond the specifications. The Go module interface is described as work in progress and not yet stable. The GitHub Action documentation notes that GitHub Container Registry bandwidth was free during its beta and might incur costs afterward.
Good
- Supports JSON, JUnit, TAP, and text output
- Custom schema locations support offline validation
- Documentation covers GitHub Actions and GitLab CI
- Available for Linux, macOS, and Windows
Watch out
- Does not cover additional server-side validations
- Go module interface is not yet stable
- Container Registry bandwidth might incur costs after beta
Who it suits
Kubeconform suits people validating Kubernetes manifests locally or in CI workflows. It may fit users who need custom schemas or offline validation, provided specification checks cover their needs.
Verdict
Kubeconform focuses on Kubernetes OpenAPI specification checks, with options for custom schemas and CI use. Its validation boundary and unstable Go module interface are worth noting.
Plans and prices
From kubeconform's own pricing page, checked 4 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Kubeconform | Free | No paid plans or usage limits stated on the official site |
The facts
Each one read from kubeconform's own pages, with the date it was checked.
What it does
- CI integrations
- The documentation shows using Kubeconform with GitHub Actions and GitLab CI through its Docker images.checked 4 Oct 2026
- Custom resources
- Users can configure remote or local schema locations to validate custom resources and support offline validation.checked 4 Oct 2026
- Docker registry
- Kubeconform publishes Docker images to GitHub Container Registry for use in CI workflows.checked 4 Oct 2026
- Installation
- The official installation guide documents Linux, macOS via Homebrew, and Windows downloads.checked 4 Oct 2026
- Library status
- The Go module interface is described as work in progress and not yet stable.checked 4 Oct 2026
- License
- The GitHub repository identifies the project license as Apache-2.0.checked 4 Oct 2026
- Output formats
- The command line supports JSON, JUnit, TAP, and text output formats.checked 4 Oct 2026
- Performance
- It validates and downloads manifests concurrently and caches downloaded files in memory.checked 4 Oct 2026
- Pricing caveat
- The GitHub Action documentation says GitHub Container Registry bandwidth was free during its beta and might incur costs afterward.checked 4 Oct 2026
- Purpose
- Kubeconform validates Kubernetes manifests so users can catch broken configuration before deploying.checked 4 Oct 2026
- Schemas
- It uses a self-updating fork of the Kubernetes JSON schema registry by default to provide schemas for recent Kubernetes versions.checked 4 Oct 2026
- Validation limit
- Kubeconform checks manifests against Kubernetes OpenAPI specifications, so additional server-side validations are outside its coverage.checked 4 Oct 2026
Alternatives to kubeconform
- 1
Chef InSpec
Free planOpen sourceAPILinuxmacOSSelf-hosted8.0From $59 a year - 2
AWS CloudFormation
Free planiOSWebAPILinux7.7Free plan - 3
CIS-CAT Pro Assessor
Free planAPILinuxmacOSSelf-hosted7.7From $2,400 a year - 4
Test Kitchen
Free planOpen sourceAPILinuxmacOSSelf-hosted7.2Free plan - 5
kube-score
Free planWebLinuxmacOSSelf-hosted7.0Free plan - 6
Conftest
Free planLinuxmacOSWindows6.8Free plan