skills.rest
Sir-chawakorn
Sir-chawakornCOMMUNITY
Explore all skills by this author →
GitHub

k8s-manifest-review

Validate Kubernetes and Helm manifests for production readiness using kubeconform and conftest.

9|3|Updated Jun 13, 2026
Search Tags:#devops#code review#security#kubernetes#infrastructure#helm
One-click install
npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill k8s-manifest-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: k8s-manifest-review
Source: https://github.com/Sir-chawakorn/sanook-cli/tree/main/skills/k8s-manifest-review
Command: npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill k8s-manifest-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires kubeconform, conftest, helm, kustomize.

What problem does it solve?

This skill prevents production outages and configuration errors by enforcing strict Kubernetes best practices, security standards, and structural integrity before manifests are ever applied to a cluster.

Core Features & Use Cases

  • Structural Validation: Uses kubeconform to ensure manifests adhere to official Kubernetes schemas and strict field requirements.
  • Security Enforcement: Audits security contexts, privilege escalation, and root access to ensure compliance with Pod Security Standards.
  • Operational Readiness: Verifies resource requests, limits, probes, and availability configurations like PDBs and topology spread to ensure high availability.
  • Use Case: Before merging a pull request that updates a Helm chart, use this skill to catch missing readiness probes, incorrect resource limits, or invalid API versions that would otherwise cause deployment failures.

Quick Start

Use the k8s-manifest-review skill to audit the Kubernetes manifests located in the current directory for production readiness.

Frequently Asked Questions about k8s-manifest-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate Kubernetes manifests for production-readiness before deployment?▼

You validate Kubernetes manifests for production-readiness by checking resource constraints, security contexts, and structural integrity using kubeconform for schema validation and conftest for policy enforcement.

What does kubeconform check during a Kubernetes manifest review?▼

Kubeconform checks structural integrity during Kubernetes manifest validation by ensuring manifests adhere to official Kubernetes schemas and strict field requirements before application to a cluster.

How do I enforce Pod Security Standards in a Helm chart pull request?▼

You enforce Pod Security Standards in a Helm chart pull request by auditing security contexts, privilege escalation, and root access configurations using conftest policy-as-code enforcement.

Do I need conftest and kustomize to validate Kubernetes workloads offline?▼

You need kubeconform and conftest to perform offline schema validation and policy-as-code enforcement, while kustomize and helm are required to process and render templated manifests.

What is the best way to catch missing readiness probes in Kubernetes YAML files?▼

The best way to catch missing readiness probes in Kubernetes YAML files is to run an operational readiness audit verifying resource requests, limits, probes, and availability configurations like PDBs.

Can I use this Kubernetes validation approach in CI/CD pipelines?▼

Yes, you can use this Kubernetes manifest validation approach in CI/CD pipelines and manual code reviews to prevent configuration errors and production outages before manifests are applied.

Related Skills

Explore More Software Engineering Skills→
colek42colek42
1

ArgoCD Management Best Practices

Enforces GitOps workflows by routing Kubernetes deployments through ArgoCD Application CRs and automated syncs.

Community
Intermediate
kcns008kcns008
3

kubernetes-gitops

Automate GitOps workflows and CI/CD integration for Kubernetes/OpenShift clusters.

Community
Advanced
AngelP17AngelP17
1

k8s-security-policies

Implement Kubernetes NetworkPolicy, PodSecurityPolicy, and RBAC security controls.

Community
Advanced
zzw4257zzw4257

kube-bench

Audit Kubernetes clusters against the CIS Kubernetes Benchmark.

Community
Intermediate