Recent searches
Search options
one gem from #kubecon2023 is the talk on #kubernetes declarative validation and admission; https://www.youtube.com/watch?v=rFaWmd7Y7i0
2. you can use CEL validation in a stand-alone ValidatingAdmissionPolicy. this allows opt-in validation on native/custom types (so you can e.g. create company wide-policies) - https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/ (beta in 1.28)
KubernetesValidating Admission PolicyFEATURE STATE: Kubernetes v1.28 [beta] This page provides an overview of Validating Admission Policy.
What is Validating Admission Policy? Validating admission policies offer a declarative, in-process alternative to validating admission webhooks.
Validating admission policies use the Common Expression Language (CEL) to declare the validation rules of a policy. Validation admission policies are highly configurable, enabling policy authors to define policies that can be parameterized and scoped to resources as needed by cluster administrators.