Action — kubeconform

Validates Kubernetes manifests with kubeconform. Optionally validates CRDs against the Datree CRDs-catalog (cert-manager, Traefik, etc.).

Usage

steps:
  - uses: actions/checkout@v4

  - uses: KevinDeBenedetti/github-workflows/.github/actions/kubeconform@main
    with:
      paths: kubernetes/

Inputs

Input	Type	Default	Description
paths	string	kubernetes/	Directory containing Kubernetes manifests
exclude	string	.*-values\.yaml	Regex passed to -ignore-filename-pattern to exclude files
include-crds-catalog	string	'true'	Validate CRDs against the Datree CRDs-catalog
ignore-missing-schemas	string	'false'	Skip validation for resources whose schema is not found (e.g. custom CRDs not in the catalog)

Steps

1. Download and install kubeconform 0.7.0 to $RUNNER_TEMP/kubeconform (added to PATH)
2. Run kubeconform -strict -summary on manifests under paths (excluding files matching exclude)

Notes

• Run in strict mode — any unknown field causes a validation failure.
• include-crds-catalog: true (default) adds the Datree CRDs-catalog as an extra schema source, enabling validation of common CRD types beyond the built-in Kubernetes schemas.
• Helm values files (*-values.yaml) are excluded by default since they are not valid Kubernetes manifests.