Skip to main content
Version: 1.0.0

kubeapt validate

Validate admission policies and bindings against resources from a cluster or local files. Use the flags below to select bundles, policies, and the resources to evaluate.

Usage

kubeapt validate [flags]

Subcommands

None.

Arguments

FlagTypeDefaultDescription
--pipelineboolfalseIndicate the command runs inside CI/CD
-A, --all-namespacesboolfalseUse all namespaces instead of the active one
-n, --namespacesstringComma separated list of namespaces to evaluate
--namespace-selectorstringLabel selector to choose namespaces (e.g. env=prod)
-f, --formatstringtableSpecify the report output format: table or json
--reportstringsummarySpecify the final report type: summary or all
--outputstringWrite the report to a file path instead of stdout
--bundlestringPolicy bundle name to use for policies/bindings
--bundle-versionstringBundle version to use with --bundle (defaults to latest)
-p, --policiesstringSpecify the file or folder to the ValidatingAdmissionPolicy YAML file
-P, --policy-namestringPolicy name to use from downloaded policies
-b, --bindingsstringSpecify the file or folder to the ValidatingAdmissionPolicyBinding YAML file
-r, --resourcestringSpecify the file or folder to the resource YAML file to validate
--psa-levelstringPSA level to evaluate when using the pod-security-admission bundle: baseline or restricted
--log-filestringOptional file to capture WARN/AUDIT output
--ignore-bindingsboolfalseIgnore binding match rules and match policies on all selected resources
--viewstringReport view: policy, namespace, or resource
--log-levelstringinfoSet logging level (debug, info, warn, error)
--kubeconfigstringPath to kubeconfig file
-h, --helpboolfalseShow help for this command