Kubernetes Manifest Helper
Inspect Kubernetes YAML — resource inventory, structural validation, cross-resource relationships (Service ↔ Pod labels, Ingress → Service, HPA → target, ConfigMap/Secret/volume refs), readiness (probes / resources / replicas), and pod-security findings — or switch to Generate and build a manifest bundle (Deployment + Service / Ingress / ConfigMap / Secret / HPA / PDB / PVC / Namespace, or a standalone CronJob / ConfigMap / Secret) from a guided form. Runs in your browser; manifests are never uploaded. For a dedicated pod-security scan, see the K8s Policy Inspector.
Auto-runs as you type / change the form. Ctrl+Enter to re-run.
How to use the Kubernetes Manifest Helper
Generate, inspect, validate, and improve Kubernetes YAML manifests for the resources you actually use: Deployment, Service, Ingress, ConfigMap, Secret, HorizontalPodAutoscaler (HPA), CronJob, Job, PersistentVolumeClaim, RBAC (Role / RoleBinding / ServiceAccount), and NetworkPolicy. Generate starters from a simple form, paste existing manifests for validation, and get best-practice warnings before kubectl apply. Runs locally; manifests are never uploaded.
What it does
- Generates templates for Deployment, Service, Ingress, ConfigMap, Secret, HPA, CronJob, Job, PVC, ServiceAccount, Role / RoleBinding, NetworkPolicy.
- Form-driven inputs (name, namespace, image, port, env, replicas) produce idiomatic YAML.
- Validates pasted manifests: missing
apiVersion,kind,metadata.name; obvious schema mistakes; selector/label mismatches. - Best-practice checks: missing resource
requests/limits, missinglivenessProbe/readinessProbe,latesttag, plainSecretwith stringData visible. - ConfigMap and Secret accept
KEY=valueinput for fast scaffolding. - Multi-document YAML (
---) is supported across generation and validation.
When to use it
- Bootstrap a new service with Deployment + Service + Ingress quickly.
- Add an HPA or NetworkPolicy to an existing service without memorizing the schema.
- Validate a manifest pasted from a ticket before applying it.
- Convert
KEY=valueenv vars into a proper ConfigMap or Secret YAML. - Catch missing probes / resource limits before a code review.
- Produce a starter to hand off to a platform team.
How to use it
- Pick the resource you need (Deployment, Service, Ingress, etc.) in the generator.
- Fill in name, namespace, image, port, replicas, and any extras (env, labels, probes).
- Copy or download the generated YAML, then refine for cluster-specific annotations.
- To check an existing manifest, paste it into the validation tab — best-practice warnings are listed inline.
- Pair with the YAML Validator for pure syntax checks and the ENV Converter for Kubernetes Secret generation from
.env.
Tips & pitfalls
- The selector on a Service must match the labels on Pods — the most common reason a service has 0 endpoints.
- Always set resource requests / limits and at least a readiness probe in production.
- Avoid the
latestimage tag — pin to a digest or semantic tag for reproducible deploys. - A Kubernetes
Secretwithdata:requires Base64-encoded values;stringData:takes plain values. - Ingress resources differ by controller (NGINX, Traefik, GKE) — annotations are non-portable.
- This tool generates YAML and validates structure — it does not connect to a cluster.
FAQ
- How do I create a Kubernetes Deployment YAML? Use the Deployment generator; fill in name, image, port, replicas; copy the YAML.
- How do I generate a Kubernetes Secret from a .env file? Use the ENV Converter and pick Secret as the output, or paste the env into the Secret generator.
- Does this tool deploy to my cluster? No — it only generates and validates YAML. Apply with
kubectl applyyourself. - Will it catch all manifest errors? No — it flags common issues but does not run a full schema check. Use
kubectl --dry-run=serverfor full validation. - Are pasted manifests uploaded? No. All validation and generation runs in your browser.
- What about CRDs? CRDs require their own schemas; the helper covers core resources, not custom resources.
Runs locally in your browser. No uploads. The helper generates YAML — never apply to a cluster without review.