mirror of
https://github.com/kubernetes-sigs/kustomize.git
synced 2026-05-17 18:25:26 +00:00
ed2ca23400
* Pin tool versions with hack/go.mod This change centralizes the tracking of versions for tools used for development and testing. This way, the tools and all their dependencies have their checksums stored in hack/go.sum, which improves supply chain security. * Workspace Sync & Tidy
Validation
This is an example of implementing a validation function against kubeval.
Function implementation
The function is implemented as an image, and built using make image.
The function is implemented as a go program, which reads a collection of input Resource configuration, passing each to kubeval.
Function configuration
A number of settings can be modified for kubeval in the function spec. See
the API struct definition in main.go for documentation.
Function invocation
The function is invoked by authoring a local Resource
with metadata.annotations.[config.kubernetes.io/function] and running:
kustomize fn run local-resource/
This exists non-zero if kubeval detects an invalid Resource.
Running the Example
Run the validator with:
kustomize fn run local-resource/
This will return an error:
Resource invalid: (Kind: Service, Name: svc)
prots: Additional property prots is not allowed
Error: exit status 1
Now fix the typo in example-use.yaml and run:
kustomize fn run local-resource/
This will return success (no output).