KubeConform does not give error on invalid namespace names

[Moulick]

Kubeconform does not give an error when fed a invalid namespace as below

apiVersion: v1
kind: Namespace
metadata:
  name: .hello

❯ kubeconform -verbose -strict namespace.yaml
namespace.yaml - Namespace .hello is valid

Version: 0.4.12

This is same as in KubeVal instrumenta/kubeval#321

[eyarz]

This validation (verifying the name value is valid) is not part K8s JSON Schema that Kubeconform is using to validate your manifest. This is why it will also happen if you will run kubectl --dry-run=client. Therefore, it's not a bug, just a limitation.

[yannh]

Thanks @eyarz , and indeed - there are quite a few scenarios where Kubeconform will not detect an error, but the resource might still fail to apply. The correct (alas not so easy) way to fix this is to improve Kubernetes' swagger file,which is pretty much what Kubeconform validates against. Sorry :(