Help with locally stored schemas about kubeconform HOT 4 CLOSED

Hi @svmundada , I think it might have to do with your schema file: it contains this:

  "$ref": "#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta",

And that reference to definitions might be missing - I suspect your schema is not valid.

From your command "kustomize fetch openapi" I guess it might return an openapi schema, which you would need to convert to jsonschema using https://github.com/yannh/openapi2jsonschema first (kubeconform, like kubeval, uses jsonschema and not openapi for validation, mostly due to availability of validation libraries).

If this is for the Prometheus operators, these are the openapi files I use: https://github.com/prometheus-operator/prometheus-operator/tree/master/example/prometheus-operator-crd :

$ openapi2jsonschema https://raw.githubusercontent.com/prometheus-operator/prometheus-operator/master/example/prometheus-operator-crd/monitoring.coreos.com_servicemonitors.yaml
JSON schema written to servicemonitor_v1.json

^ This is the file to validate against.

I'll leave this open - good luck!

from kubeconform.

Hi @svmundada , I ll be closing this for now since it looks like there is no issue with kubeconform itself. Let me know if I can maybe make the documentation better! 👍

from kubeconform.

Hi @yannh, Thanks for your reply, I understand the process better but still stuck.

I tried this openapi2jsonschema openapi.json --kubernetes --strict --stand-alone --expanded and it created schemas/servicemonitor-monitoring-v1.json. My requirement is to have multiple apiversions that's why using --expanded.

Can you please tell what would be the correct template string ? I tried this schemas/{{ .ResourceKind }}{{ .KindSuffix }}-{{ .ResourceAPIVersion}}.json but its not working.

Edit: It worked, after changing the template to schemas/{{ .ResourceKind }}{{ .KindSuffix }}.json, but its failing for core types. But I mitigated by adding -schema-location=default. Is there any way to incorporate core ones? For core types it generates schemas/pod-core-v1.json and may be kubeconform is looking for schemas/pod-v1.json.

from kubeconform.

Well done! You can provide several -schema-locations:

kubeconform -schema-location 'schemas/{{ .ResourceKind }}{{ .KindSuffix }}.json' -schema-location default .....

Default is an alias for this repository: https://github.com/yannh/kubernetes-json-schema , and Kubeconform will download the files as required. Kubeconform will look into each of these "schema locations" and try to find a match for the schema.

I hope this helps, best,
Yann

from kubeconform.