Kubernetes tools
Validate the manifests you have, or generate the one you need.
Kubernetes YAML Generator
Answer a few questions, get a manifest
Generate Kubernetes manifests from a short form: Deployment, Service, Ingress, PVC and HPA, with probes and resource limits filled in sensibly.
Kubernetes YAML Validator
Is this YAML valid, and where is it wrong?
Validate Kubernetes YAML and get the exact line and column of any syntax error, in plain language.
Kubernetes Rollout & Probe Timing
Restart loops, capacity dips and stuck drains
Work out how long a Kubernetes rollout really takes, and how long a container gets to start before the liveness probe kills it.
Kubernetes Service Checker
Will this Service have any endpoints?
Find out why a Kubernetes Service has no endpoints. Compares the selector against the pod template labels and names the key that is wrong.
Kubernetes Network Policy Viewer
What can reach what, and what just broke
Resolve NetworkPolicies to see what they actually permit and which pods they flip to default-deny.
Kubernetes Manifest Diff
What actually changed
Compare two sets of Kubernetes manifests by meaning, not by text. Key order and fields the cluster wrote itself are ignored.
Kubernetes Resource Calculator
What these manifests actually reserve
Add up Kubernetes CPU and memory requests across every container and replica, with the QoS class per workload and the nodes it needs.
Kubernetes RBAC Viewer
Who can actually do what
See who can actually do what from Kubernetes Roles and bindings, with the routes to cluster-admin named: impersonate, escalate and bind.
Kubernetes Deployment Generator
See the capacity dip before you deploy
Generate a Deployment and see the capacity envelope your rollout settings actually produce, drawn to scale.
Kubernetes Service Generator
port, targetPort, and which one you meant
Generate a Kubernetes Service with the port fields explained: targetPort defaults to port, not to your container's, which breaks quietly.
Kubernetes StatefulSet Generator
Stable names, and volumes that outlive you
Generate a StatefulSet with its volume claim template and the headless Service it requires.
Kubernetes QoS Class Calculator
And where you sit in the eviction order
Work out whether a pod is Guaranteed, Burstable or BestEffort, and which container demoted it.
Kubernetes Node Capacity Planner
Allocatable is not capacity
Work out what a Kubernetes node can really schedule once kube-reserved, system-reserved and the eviction threshold are taken out.
Kubernetes Max Pods per Node Calculator
The ENI limit, not the 110 default
Find the real pod ceiling for a Kubernetes node. On EKS the VPC CNI caps it by ENIs per instance type, not by the 110 default.
Kubernetes Label Selector Tester
Which key failed, not just that one did
Test a label selector against a set of objects and see exactly which key failed and why.
Kubernetes Taint & Toleration Tester
Tolerations permit, they do not attract
Work out which pods can schedule onto which tainted nodes, and what toleration would fix a rejection.
Kubernetes Resource Name Validator
RFC 1123 subdomain, label, or 1035
Check Kubernetes object names against the rule that actually applies to them.
Kubernetes Label & Annotation Validator
Why your image tag is not a legal label
Validate label keys, label values and annotations against their real limits.
Kubernetes CrashLoopBackOff Guide
The status is a timer, not a cause
Where to actually look when a pod is in CrashLoopBackOff, in the order that finds it fastest.
Kubernetes TLS Certificate Decoder
When it expires, and what it covers
Decode a certificate or a Kubernetes TLS Secret in your browser: expiry, subject alternative names, key size and chain order.
Kubernetes ServiceAccount Token Decoder
Bound or legacy, and when it dies
Decode a Kubernetes ServiceAccount token and see which account it belongs to, which pod it is bound to, and when it expires.
Kubernetes imagePullSecret Generator
The registry URL nobody gets right
Build a Kubernetes imagePullSecret that works. Docker Hub must be written as https://index.docker.io/v1/ and nothing else, or the pull is anonymous.
Kubernetes cert-manager Certificates
Issuer scope, and the rate limit that costs a week
Generate a Kubernetes cert-manager Certificate and Issuer. issuerRef never crosses namespaces, and the Let's Encrypt rate limit costs a week.
Kubernetes Flux HelmRelease Generator
With the source it cannot work without
Generate a Flux HelmRelease together with its HelmRepository or GitRepository source.
Kubernetes Helm Chart Generator
Chart.yaml, values, and working templates
Scaffold a Kubernetes Helm chart with templates that indent correctly, and the difference between version and appVersion explained.
Kubernetes Argo CD Application Generator
The defaults that are off, turned on
Generate an Argo CD Application with pruning, self-healing and the delete finalizer set deliberately.
Kubernetes Ingress Generator
pathType, and the TLS secret that fails quietly
Generate an Ingress with the required pathType on every path, an ingressClassName rather than the deprecated annotation, and TLS wired correctly.
Kubernetes HPA Generator
Why it says unknown and never scales
Generate a Kubernetes HPA on autoscaling/v2. CPU targets are a percentage of the request, so a pod without one reports unknown and never scales.
Kubernetes SecurityContext Generator
Pod level, container level, and which wins
Generate a hardened Kubernetes securityContext, with which fields exist at pod level, which at container level, and which one wins.
Kubernetes Probe Generator
How long it gets to start before liveness kills it
Generate liveness, readiness and startup probes, with the startup budget worked out and drawn to scale.
Kubernetes PVC Generator
Access modes your storage can actually do
Generate a PersistentVolumeClaim, with the access mode checked against what real storage backends support.
Kubernetes ResourceQuota Generator
And the LimitRange that stops it breaking deploys
Generate a ResourceQuota with the matching LimitRange, because the two are only safe together.
Kubernetes CronJob Generator
The fields that decide whether it runs
Generate a CronJob with a timezone, a starting deadline and a hard timeout.
Kubernetes NetworkPolicy Generator
With the DNS rule already in it
Generate a Kubernetes NetworkPolicy that does not break DNS, with the cloud metadata endpoint excluded from broad CIDR rules.
Kubernetes RBAC Generator
And what it actually grants
Generate a Role or ClusterRole with its binding, checked by our own RBAC analyzer.
Kubernetes PodDisruptionBudget Generator
Can this budget ever be satisfied?
Generate a PodDisruptionBudget and find out how many pods it actually leaves evictable.
Kubernetes API Deprecation Checker
What breaks on the next upgrade
Paste your manifests, pick a target version, and see which objects stop applying and which break later.
Kubernetes Kubeconfig Viewer
Read it without handing it to anyone
See every context, cluster and user in a kubeconfig, with client certificate expiry decoded from the certificate itself.
Kubernetes Quantity Parser
What 512Mi, 100m and 1e3 actually mean
Convert and validate Kubernetes resource quantities: millicores to cores, Mi to MB, and every suffix the API server accepts.
Kubernetes Multi-Document YAML Splitter
One file per object, in apply order
Split a multi-document manifest into one file per object, with the original text preserved comment for comment.
Kubernetes .env to ConfigMap & Secret
Split the credentials out on the way
Turn a .env file into a Kubernetes ConfigMap and Secret, with credentials split out automatically and the keys envFrom silently drops named.
Kubernetes Secret Decoder
See what is actually in there
Decode the base64 in a Kubernetes Secret manifest and see every value in plain text, with the credentials it recognises called out.
Kubernetes Ingress to Gateway API
Which annotations silently stop working
Convert a Kubernetes Ingress to Gateway API, with every controller annotation classified: direct equivalent, filter, or no equivalent at all.
Kubernetes Manifest Visualizer
What points at what, and what points at nothing
See the object graph in a bundle of Kubernetes manifests: what points at what, and every reference that points at nothing.
Kubernetes Patch Tester
Which --type, and what it deletes
Apply a patch to a Kubernetes object as strategic, merge or json and see the resulting object plus every field that changed.
Kubernetes kubectl JSONPath Tester
kubectl's dialect, not generic JSONPath
Test a kubectl -o jsonpath template against real kubectl get output and see exactly what it would print.
Kubernetes Node Affinity Tester
Required excludes, preferred only scores
Describe your nodes, paste a pod, and see which nodes it can land on and why the rest cannot.
Kubernetes Helm Values Diff
A missing key is a third value
Compare two Kubernetes Helm values.yaml files by leaf path rather than by line, so a key moved in the file is not reported as a change.
Kubernetes Pod and Service CIDR
Fixed at cluster creation
Pod and service CIDR sizing, the per-node mask and the node ceiling that falls out of them.
Kubernetes Secret Encoder
base64 is not encryption
base64-encode values into a Secret manifest, in your browser and nowhere else.
Kubernetes API Version Checker
Will this apply on that cluster
Check every apiVersion in a manifest against a target cluster version.
Kubernetes Go Template Tester
Go truthiness is not JavaScript's
Render a Helm template against values in your browser, with a subset of Go text/template plus about forty Sprig functions.
Kubernetes Cluster Cost Estimator
At your rates, not a price table
What a Kubernetes cluster costs a month at rates you supply. No bundled price table, because any price list in a tool is stale.
Kubernetes Kustomize Build
Transformers run in kustomize's order
Build a Kubernetes kustomization and see the result. Transformers run in kustomize's fixed order, not the order you wrote them.
Kubernetes Helm Chart Validator
version is SemVer, appVersion is not
Check a Kubernetes Helm chart's Chart.yaml, values.yaml and schema against each other. version must be SemVer; appVersion need not be.