6.1The Problem: Kubernetes Accepts Almost Anything

Kubernetes is remarkably permissive in what it accepts. A deployment with no resource limits, no health checks, running as root, with the latest tag will deploy successfully. Kubernetes does not tell you it will behave badly -- it just does what you asked, and you discover the consequences in production.

Manifest validation tools catch these misconfigurations before they reach the cluster. They enforce best practices that Kubernetes itself does not require but that production operations demand.