Files
kustomize/functions/examples/validator-kubeval
Sylvain Rabot b1f100e3da Run go work sync and go mod tidy
```shell
go work sync
for i in $(find . -name go.mod); do (cd $(dirname $i); go mod tidy); done
```

Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
2023-10-28 13:05:11 +02:00
..
2023-10-28 13:05:11 +02:00

Validation

This is an example of implementing a validation function against kubeval.

Function implementation

The function is implemented as an image, and built using make image.

The function is implemented as a go program, which reads a collection of input Resource configuration, passing each to kubeval.

Function configuration

A number of settings can be modified for kubeval in the function spec. See the API struct definition in main.go for documentation.

Function invocation

The function is invoked by authoring a local Resource with metadata.annotations.[config.kubernetes.io/function] and running:

kustomize fn run local-resource/

This exists non-zero if kubeval detects an invalid Resource.

Running the Example

Run the validator with:

kustomize fn run local-resource/

This will return an error:

Resource invalid: (Kind: Service, Name: svc)
prots: Additional property prots is not allowed
Error: exit status 1

Now fix the typo in example-use.yaml and run:

kustomize fn run local-resource/

This will return success (no output).