Datree k8s

datree test <manifest.yml>

Validates Kubernetes manifests with Datree, applying the organization's policies (resources, security, conventions) to the manifest.

Run it in the CI/CD pipeline (or pre-commit) when you want validation of K8s manifests: datree test analyzes the manifest (deployment, service, etc.) and reports findings — the organization's policies (resource limits, liveness/readiness probes, imagePullPolicy, privileged containers, secrets) — with the rule and the result. It is Datree's reference K8s policy validator: the pipeline check for manifests before apply. In K8s DevSecOps, Datree is the pipeline gate: a manifest that violates policies is blocked before deploy.

Do not use it as a full cluster analysis: Datree validates manifests (YAML policies) — the actual cluster state (running resources) is covered by runtime tools (kube-bench, 037, Falco). Datree policies are configurable (default + custom): generic ones generate false positives in legitimate contexts. And note: the Datree project is in maintenance mode (the company ceased development): the tool still works, but alternatives (Kyverno, OPA) are maintained; the choice should be reviewed. Datree is the simple pipeline validator; runtime policies (Gatekeeper/Kyverno) are the cluster layer.