Skip to content

Commit 0368c70

Browse files
committed
Clarify precedence in case of schema conflict
Signed-off-by: Max Smythe <[email protected]>
1 parent ecc379a commit 0368c70

File tree

1 file changed

+6
-0
lines changed
  • keps/sig-api-machinery/3488-cel-admission-control

1 file changed

+6
-0
lines changed

keps/sig-api-machinery/3488-cel-admission-control/README.md

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1102,6 +1102,12 @@ same expensive expression, that expression could be refactored out into a
11021102
variable.
11031103
##### Policy Predicates
11041104

1105+
Note that the syntax of the `matchConditions` resource is intended to
1106+
align with the [Admission Webhook Match Conditions KEP #3716](https://github.com/kubernetes/enhancements/pull/3717),
1107+
so that KEP should be controlling with regard to deviations in the schema.
1108+
This section is focused specifically on how the `matchConditions` concept can
1109+
be applied to in-process admission.
1110+
11051111
The match criteria in bindings are not expected to be able to cover all possible
11061112
ways users may want to scope their policies. For example, there is no way to
11071113
match off of kind, only resource. To provide extensibility for the match criteria

0 commit comments

Comments
 (0)