v0.1.3

KubeLinter v0.1.3

Changes in this version: 0.1.2...0.1.3

Features

• Added new default check to ensure labelSelector in deployments match pod labels
• Added new default check to enforce that objects with multiple replicas use inter-pod anti-affinity

General Improvements

• KubeLinter is now available on Homebrew and Linuxbrew.
• KubeLinter is now available as a Docker image at https://hub.docker.com/r/stackrox/kube-linter.

Bugs Fixed

• Fixed issue where the built-in check for secrets in env variable would fire even in secretKeyRefs (#72)
• Fixed typo in the remediation text for the deprecated service account check (#28)

v0.1.2

KubeLinter v0.1.2

Changes in this version: 0.1.1...0.1.2

Improvements

• KubeLinter now supports list objects, so you can run kubectl get deploy -o yaml | kube-linter lint - and have it succeed.

Bugs Fixed

• Fixed issue with make build on clean Mac. (#29)
• Fixed typo in the deprecated service account check's message (#28)

v0.1.1

KubeLinter v0.1.1

Bugs Fixed

• The format of ignore annotations has changed, since the earlier format did not pass API server validation. See the docs for details of the new format.

v0.1.0

KubeLinter v0.1.0

Major changes

• New checks and templates: We've added several new built-in checks and check templates. You can see the full list in our docs for templates and checks.
• Helm support: kube-linter lint now automatically detects Helm charts and renders them before linting them.
• Remediations: Checks now contain a "remediation" field, intended to tell the user what they need to do to fix the check. All built-in checks have this field populated.
• Support for ignore directives: You can now ignore specific violations for a given object using annotations. See the docs for more details.

v0.0.4

Refactor parameters to support arbitrary types (#10)

Instead of a map[string]string, support (almost) arbitrary parameters via a map[string]interface{}.

Use k8s-style methodology to describe the objects: ie, describe them as Go structs, embedding metadata in comments, and parse out the properties from that using the same library k8s uses, and then use code generation for the validation etc.

Also add a new check template (and built-in check) for forbidden API object versions.

v0.0.3

Upload release artifacts when a tag is cut (#8)

v0.0.2

Add a couple more check templates and built-in checks (#6)

v0.0.1

Add README and documentation (#5)