Kubernetes Manifest Diff
Compare two sets of Kubernetes manifests and report what applying the second will actually do. Objects are matched the way an apply matches them, by apiVersion, kind, namespace and name. Reports a change to a field that is immutable for that kind, where an apply fails and the object must be deleted and recreated; a change under the pod template, which recreates every pod; a replica change; an object that is gone, which an apply does not delete; and a change that recreates nothing.
The wallet the 402 directs payment to. Its whole payment record — every payer, every chain — is on the merchant page.
Asset 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913
The payTo wallet does not resolve to a registered ERC-8004 agent. That is not a verdict on the service — most of the catalog is unregistered.
Accepts
The payment requirements as published to the catalog. Read the live 402 before paying — a price here is a claim, not a quote.
Pay 0.22 USDC on Base to 0x25e8…a9608. The signed payment is good for 1 minute.
- Paid to
- 0x25e8…a9608
- USD Coin contract
- 0x8335…02913
- Payment window
- 1 minute
- As published
- 220000 smallest units
The catalog’s raw entry
[
{
"asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"extra": {
"name": "USD Coin",
"version": "2"
},
"payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608",
"amount": "220000",
"scheme": "exact",
"network": "eip155:8453",
"maxTimeoutSeconds": 60
}
]Extensions
{
"bazaar": {
"info": {
"input": {
"body": {
"after": "apiVersion: apps/v1\nkind: Deployment\nmetadata:\n name: web\n labels:\n app: web\nspec:\n replicas: 5\n selector:\n matchLabels:\n app: web-v2\n template:\n metadata:\n labels:\n app: web\n spec:\n containers:\n - name: web\n image: ghcr.io/example/web:2.1.0\n ports:\n - containerPort: 8080\n resources:\n requests:\n cpu: 500m\n memory: 256M\n limits:\n cpu: 200m\n memory: 512Mi\n env:\n - name: DATABASE_PASSWORD\n value: hunter2\n - name: FEATURE_FLAG\n value: no\n---\napiVersion: v1\nkind: Service\nmetadata:\n name: web\nspec:\n type: LoadBalancer\n selector:\n app: webserver\n ports:\n - port: 80\n targetPort: 9090\n",
"before": "apiVersion: apps/v1\nkind: Deployment\nmetadata:\n name: web\n labels:\n app: web\nspec:\n replicas: 3\n selector:\n matchLabels:\n app: web\n template:\n metadata:\n labels:\n app: web\n spec:\n containers:\n - name: web\n image: ghcr.io/example/web:latest\n ports:\n - containerPort: 8080\n resources:\n requests:\n cpu: 500m\n memory: 256M\n limits:\n cpu: 200m\n memory: 512Mi\n env:\n - name: DATABASE_PASSWORD\n value: hunter2\n - name: FEATURE_FLAG\n value: no\n---\napiVersion: v1\nkind: Service\nmetadata:\n name: web\nspec:\n selector:\n app: webserver\n ports:\n - port: 80\n targetPort: 9090\n"
},
"type": "http",
"method": "POST",
"bodyType": "json"
},
"output": {
"type": "json",
"example": {
"limits": {
"maxFindings": 500,
"maxDocuments": 100,
"maxYamlBytes": 262144,
"maxDockerfileBytes": 131072
},
"passed": false,
"objects": [
{
"kind": "Deployment",
"object": "apps/v1/Deployment/default/web",
"changed": true,
"restarts_pods": true,
"immutable_fields_changed": [
"spec.selector"
]
},
{
"kind": "Service",
"object": "v1/Service/default/web",
"changed": true,
"restarts_pods": false,
"immutable_fields_changed": [
"spec.type"
]
}
],
"complete": true,
"findings": [
{
"code": "SCALAR_IS_A_YAML_BOOLEAN",
"line": 33,
"detail": "before: \"no\" is an unquoted YAML 1.1 boolean and reads as false, not as the text no. Quoting it keeps it a string.",
"location": "spec.template.spec.containers[0].env[1].value"
},
{
"code": "SCALAR_IS_A_YAML_BOOLEAN",
"line": 33,
"detail": "after: \"no\" is an unquoted YAML 1.1 boolean and reads as false, not as the text no. Quoting it keeps it a string.",
"location": "spec.template.spec.containers[0].env[1].value"
},
{
"code": "IMMUTABLE_FIELD_CHANGED",
"detail": "apps/v1/Deployment/default/web changes spec.selector, which is immutable for a Deployment. An apply fails and the object has to be deleted and recreated, which for a Service means losing its cluster I...",
"location": "apps/v1/Deployment/default/web"
}
],
"unchanged": false,
"request_id": "example-request",
"service_id": "kubernetes_manifest_diff",
"assumptions": [
"Objects are matched by apiVersion, kind, namespace and name, which is how an apply matches them. A rename is therefore a removal and an addition, not a change, which is exactly what the cluster will d...",
"A change under the pod template recreates every pod and a change anywhere else does not, so the two are reported separately rather than as one undifferentiated diff.",
"The immutable field list is per kind and is published in the response, so a caller can see which fields were considered rather than trusting an unstated list."
],
"limitations": [
"The two document sets supplied. Admission controllers, defaulted fields and server-side apply field ownership are outside this, and nothing is fetched.",
"unchanged is true only when every object was compared and nothing differed."
],
"observed_at": "2026-10-02T00:00:00.000Z",
"not_examined": [],
"finding_count": 5,
"service_version": "1.0.0",
"findings_by_code": {
"REPLICAS_CHANGED": 1,
"IMMUTABLE_FIELD_CHANGED": 2,
"SCALAR_IS_A_YAML_BOOLEAN": 2
},
"after_object_count": 2,
"before_object_count": 2,
"changed_object_count": 2,
"immutable_change_count": 2,
"restarting_object_count": 1
}
}
},
"schema": {
"type": "object",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"input"
],
"properties": {
"input": {
"type": "object",
"required": [
"type",
"method",
"bodyType",
"body"
],
"properties": {
"body": {
"type": "object",
"required": [
"before",
"after"
],
"properties": {
"after": {
"type": "string",
"maxLength": 262144
},
"before": {
"type": "string",
"maxLength": 262144
}
},
"additionalProperties": false
},
"type": {
"type": "string",
"const": "http"
},
"method": {
"enum": [
"POST"
],
"type": "string"
},
"bodyType": {
"enum": [
"json",
"form-data",
"text"
],
"type": "string"
}
},
"additionalProperties": false
},
"output": {
"type": "object",
"required": [
"type"
],
"properties": {
"type": {
"type": "string"
},
"example": {
"type": "object"
}
}
}
}
}
}
}Provenance
- Seen in the source catalog
- 2026-10-04 08:24Z
- Last indexed by Roundhouse
- 2026-10-05 00:20Z
- Last enriched (probe, favicon, geo)
- 2026-10-05 00:46Z
- x402 version
- 2
- Max timeout
- 60s
- Liveness probe
- HTTP 0
Hand this page to an agent
Copy the prompt and paste it into Claude, an MCP client or your own agent — it will vet this service and call it over the free read API. No key, no account.
GET api.roundhouseai.io/v0/endpoints
No per-endpoint history for this service yet, so this is payments indexed to its PROVIDER's wallet over 30 days. Verified volume counts only settlements with an on-chain EIP-3009 marker.
Show the promptHide the prompt
Using Roundhouse, look up the x402 service Kubernetes Manifest Diff and tell me whether it is worth paying: what a call costs, whether the endpoint answered when last probed, and what its payment record actually shows. curl -s 'https://api.roundhouseai.io/v0/endpoints?q=Kubernetes%20Manifest%20Diff' curl -s 'https://api.roundhouseai.io/v0/merchants/<the payTo wallet returned above>' Then call it: read the price from the live 402 at https://api.zfinia.com/x402/v1/kubernetes-manifest-diff, never from a cached figure, and pay with an x402 client. The /v0 API needs an API key (`authorization: Bearer rh_live_…`) on everything except /v0/unified* and /v0/endpoints. Either pay over x402 (mint a personal key for $0.01 at GET https://api.roundhouseai.io/v0/test/x402), or ask me for an organization key, which I create at https://roundhouseai.io/dashboard/connections. If you have neither, ask before going further. If you do not have Roundhouse tools or skills installed, read https://roundhouseai.io/skill.md first — it is the whole procedure.