Skip to content

Commit 9a837c4

Browse files
committed
Clarify expression API
1 parent 975b6c9 commit 9a837c4

File tree

1 file changed

+4
-4
lines changed
  • keps/sig-api-machinery/3716-webhook-predicates

1 file changed

+4
-4
lines changed

keps/sig-api-machinery/3716-webhook-predicates/README.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -251,10 +251,10 @@ type MatchCondition struct {
251251
}
252252
```
253253

254-
The match condition expression has access to the contents of the `AdmissionRequest` object (exposed as the
255-
`request` variable), but is not given any additional information. Expressions requiring access to
256-
additional information (such as a paramater object) must be performed in the webhook, and are out of
257-
scope for this proposal.
254+
The match condition expression is evaluated by the same libraries as those used for CEL
255+
ValidatingAdmissionPolicy. The only difference in expressions is the availability of the `params`
256+
variable. Expressions requiring access to additional information outside the AdmissionRequest must
257+
be performed in the webhook, and are out of scope for this proposal.
258258

259259
### Risks and Mitigations
260260

0 commit comments

Comments
 (0)