Skip to content

Commit 5b222e1

Browse files
authored
Merge pull request #51819 from michellengnx/KEP-3962
[KEP-3962]Update the status of the MutatingAdmissionPolicy
2 parents 31d5ae3 + e65e744 commit 5b222e1

File tree

4 files changed

+17
-4
lines changed

4 files changed

+17
-4
lines changed

content/en/docs/reference/access-authn-authz/mutating-admission-policy.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,10 +9,17 @@ content_type: concept
99

1010
<!-- overview -->
1111

12-
{{< feature-state for_k8s_version="v1.32" state="alpha" >}}
12+
{{< feature-state for_k8s_version="v1.34" state="beta" >}}
1313
<!-- due to feature gate history, use manual version specification here -->
1414

1515
This page provides an overview of _MutatingAdmissionPolicies_.
16+
MutatingAdmissionPolicies allow you change what happens when someone writes a change to the Kubernetes API.
17+
If you want to use declarative policies just to prevent a particular kind of change to resources (for example: protecting platform namespaces from deletion),
18+
[ValidatingAdmissionPolicy](/docs/reference/access-authn-authz/validating-admission-policy/)
19+
is
20+
a simpler and more effective alternative.
21+
22+
To use the feature, enable the `MutatingAdmissionPolicy` feature gate (which is off by default) and set `--runtime-config=admissionregistration.k8s.io/v1beta1=true` on the kube-apiserver.
1623

1724
<!-- body -->
1825

content/en/docs/reference/command-line-tools-reference/feature-gates/MutatingAdmissionPolicy.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,14 @@ stages:
99
- stage: alpha
1010
defaultValue: false
1111
fromVersion: "1.30"
12+
toVersion: "1.33"
13+
- stage: beta
14+
defaultValue: false
15+
fromVersion: "1.34"
1216
---
1317

14-
Enable [MutatingAdmissionPolicy](/docs/reference/access-authn-authz/mutating-admission-policy/) support for [CEL](https://kubernetes.io/docs/reference/using-api/cel/) mutations be used in admission control.
18+
Enable [MutatingAdmissionPolicy](/docs/reference/access-authn-authz/mutating-admission-policy/) support, which allows
19+
[CEL](/docs/reference/using-api/cel/) mutations to
20+
be applied during admission control.
1521

1622
For Kubernetes v1.30 and v1.31, this feature gate existed but had no effect.

content/en/examples/mutatingadmissionpolicy/applyconfiguration-example.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
apiVersion: admissionregistration.k8s.io/v1alpha1
1+
apiVersion: admissionregistration.k8s.io/v1beta1
22
kind: MutatingAdmissionPolicy
33
metadata:
44
name: "sidecar-policy.example.com"

content/en/examples/mutatingadmissionpolicy/json-patch-example.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
apiVersion: admissionregistration.k8s.io/v1alpha1
1+
apiVersion: admissionregistration.k8s.io/v1beta1
22
kind: MutatingAdmissionPolicy
33
metadata:
44
name: "sidecar-policy.example.com"

0 commit comments

Comments
 (0)