File tree Expand file tree Collapse file tree 1 file changed +6
-0
lines changed
keps/sig-api-machinery/3488-cel-admission-control Expand file tree Collapse file tree 1 file changed +6
-0
lines changed Original file line number Diff line number Diff line change @@ -1102,6 +1102,12 @@ same expensive expression, that expression could be refactored out into a
1102
1102
variable.
1103
1103
# #### Policy Predicates
1104
1104
1105
+ Note that the syntax of the `matchConditions` resource is intended to
1106
+ align with the [Admission Webhook Match Conditions KEP # 3716](https://github.com/kubernetes/enhancements/pull/3717),
1107
+ so that KEP should be controlling with regard to deviations in the schema.
1108
+ This section is focused specifically on how the `matchConditions` concept can
1109
+ be applied to in-process admission.
1110
+
1105
1111
The match criteria in bindings are not expected to be able to cover all possible
1106
1112
ways users may want to scope their policies. For example, there is no way to
1107
1113
match off of kind, only resource. To provide extensibility for the match criteria
You can’t perform that action at this time.
0 commit comments