All Rules
The K3s lexicon provides 8 rules: 1 lint rule and 7 post-synth checks.
Lint Rules
Section titled “Lint Rules”| ID | Severity | Category | Description |
|---|---|---|---|
K3S001 | error | security | literal join token in source. |
Post-Synth Checks
Section titled “Post-Synth Checks”Post-synth checks validate the serialized output after the build pipeline completes.
| ID | Description |
|---|---|
K3S101 | A k3s config entity carries a literal join token |
K3S102 | registries.yaml carries a literal registry credential |
K3S103 | An agent config declares no server to join |
K3S104 | write-kubeconfig-mode is wider than 0644 |
K3S105 | registries.yaml disables TLS verification for a registry |
K3S106 | tls-san is missing while bind-address or advertise-address is declared |
K3S107 | disable names a component the config also configures |