The Kubernetes Configuration
Resolution Plane.
Reconcile and repair Kubernetes configurations before deployment.
The Resolution Matrix
Reconciles topological defects that linters only flag.
Selector Contract Alignment
Resolves Service selectors and Deployment labels to eliminate unrouted pods.
Port Contract Reconciliation
Aligns Service targetPort with container port declarations across files.
K8s API Version Upgrades
Migrates deprecated and removed apiVersions to target release specifications.
OPA & Kyverno Policy Ingestion
Injects missing securityContext, nonRoot, and capability constraints automatically.
Topological Dependency Linkage
Validates and heals ConfigMap, Secret, and PVC volume mount dependencies.
Helm & Kustomize Verification
Reconciles rendered templates and overlays before GitOps or cluster apply.
Dynamic Evaluation Pipeline
Build. Dry-run. Deploy.
Ingest
Parsing & Discovery
Parse fragmented manifests and reconstruct resource identities — even in malformed YAML.
Contextualize
Graph Construction
Maps cross-resource relationships — Services to Deployments, ConfigMaps to Pods — into a single structural graph to surface orphaned references and broken links.
Verify
Schema Alignment
Validating structural integrity against the definitive Kubernetes OpenAPI schema for your target cluster version.
Heal
Schema-Based Remediation
Applying precise, comment-preserving corrections derived from the Kubernetes OpenAPI specification.
Schema-Grounded Remediation
AI-based tools suggest. yamlr. enforces.
No heuristics. No probabilistic output. Only structurally valid, version-accurate corrections derived from the Kubernetes OpenAPI specification.
Absolute Safety.
100% Reversible.
Fear of breaking production stops developers from adopting auto-healing tools. Yamlr eliminates this by automatically generating a cryptographic snapshot into `.yamlr/backups` before any file is touched.
Automatic Snapshot
Every time you run a heal command, Yamlr quietly backups your precise local state first.
Semantic Healing
Yamlr restructures your YAML to match OpenAPI specifications while preserving human comments.
Instant Rewind
Don't like the mutations? A single command overwrites the changes with the exact prior state.
Get started.
Catch production failures before they become cluster state.
Get the Signed Binary
Automate your installation with our secure shell script, or tap directly into our Homebrew repository.
$ brew tap yamlr/tap && brew install yamlrWorks without cluster access
Tiers & Capabilities
Free for developers. Built for platform teams.
Unlimited local scanning and deterministic CST healing are 100% free forever. Upgrade for team policy integration (OPA & Kyverno), multi-repo GitOps remediation, and air-gapped compliance.
Individual
Free OSSFull native resolution engine for individual engineers. Zero artificial throttles on local workstations.
- Unlimited local scans & automated CST healing
- Cross-resource topological contract resolution
- Unified color diff previews & syntax formatting
- Atomic WAL journal rollback (.yamlr/wal/)
- SARIF 2.1.0 export for CI & GitHub Security
- VS Code Extension, pre-commit, and GitHub Action
Team
Shared governance and automated policy repair for growing engineering teams and CI/CD pipelines.
- Everything in Individual Free
- OPA Gatekeeper & Kyverno policy auto-repair
- Shared CI/CD gating with policy ingestion
- Fleet GitOps multi-repo batch remediation
- Centralized cryptographic team license seat tokens
- Priority issue response (< 24h SLA)
Enterprise
Air-GappedStrict defense, finance, and regulated infrastructure requiring air-gapped cryptographic validation.
- Everything in Team Tier
- Air-gapped offline token validation (zero phone-home)
- Cryptographic Semantic DNA receipts (HMAC-SHA256)
- Custom internal CRD schema bundling & ingestion
- ValidatingAdmissionPolicy export & runtime webhook
- Dedicated architecture SLA & custom integrations
Looking for air-gapped cluster licensing? Review architecture options.