The base-file edge is the one I see bite most often, good that you called it out. Two small additions to the CI and drift parts.
The kubeconform -kubernetes-version is hardcoded to 1.34.0, which went end of life on 27 October. I'd read it from each cluster's cluster-values.yaml, so validation moves with every cluster's upgrade instead of quietly checking against an old schema.
Get Alexandre Vazquez’s stories in your inbox
Join Medium for free to get updates from this writer.
The OutOfSync alert catches unsynced merges, but not an app that is synced and broken. Since argocd_app_info also carries health_status, a second rule on Degraded or Missing for the production project closes that gap.
How do you deal with CRDs missing from the datreeio catalog: ignore missing schemas, or generate your own?
