Catch blockers before cluster admission
Catch obvious deployment blockers before kubectl reaches a cluster. The first version performs structural preflight; versioned OpenAPI validation is planned for the professional scanner.
Current checks
- Check apiVersion, kind, and metadata
- Validate multi-document manifests
- Catch tabs and missing resource names
Validation boundary
This preflight checks identity fields and common structural or safety signals. It does not know installed CRDs, admission policies, or live cluster state. Use a server-side dry run against the authorized target cluster as the final check.