You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: keps/sig-api-machinery/3488-cel-admission-control/README.md
+10Lines changed: 10 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1946,6 +1946,16 @@ in back-to-back releases.
1946
1946
- Feature implemented behind a feature flag
1947
1947
- Ensure proper tests are in place.
1948
1948
1949
+
#### Beta
1950
+
1951
+
- add tests which registers a validation policy for everything and iterates through all groups/versions/resources/subresources
1952
+
and ensures they get intercepted and work properly with a CEL validation policy([comment](https://github.com/kubernetes/kubernetes/pull/113314#discussion_r1013596456))
1953
+
- set `paramKind` in a ValidatingAdmissionPolicy results in starting a new informer
1954
+
that watches all instances of that object using a new unstructured informer which is inefficient([comment](https://github.com/kubernetes/kubernetes/pull/113314#discussion_r1013331221))
1955
+
- switch to a lock-free implementation to address lock having to wait for all existing admission evaluations
1956
+
to complete and blocking all new admission evaluations until this completes.([comment1](https://github.com/kubernetes/kubernetes/pull/113314#discussion_r1013318103),[comment2](https://github.com/kubernetes/kubernetes/pull/113314#discussion_r1013305167))
0 commit comments