We've added support for Validators in v0.101.0. Validators are useful to enforce policies and ensure consistency early in the process. This feature addresses two primary use cases:

1. Prevent insecure configuration early in the process. For example, prevent Helm from rendering a Secret which would otherwise be committed to version control.
2. Prevent unsafe configuration by validating manifests against Kubernetes core and custom resource type definitions.

Check out the Validators tutorial for examples of both use cases.

We selected CUE as the configuration language in Holos for a number of reasons described in this post. The process was a combination of process by elimination and the unique way CUE unifies configuration.

I'm excited to share Holos, a Go command line tool we developed to make it easier to manage a platform built on Kubernetes. Holos implements the rendered manifests pattern as a data pipeline to fully render manifests generated from Helm, Kustomize, or CUE in a holistic way.