Merge pull request #54529 from lalitc375/docs-3962-stable

KEP 3962: Mutating Admission Policies (Stable v1.36)
dev-1.36
Kubernetes Prow Robot 2026-03-25 16:50:15 +05:30 committed by GitHub
commit c8de5c4e84
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
4 changed files with 10 additions and 6 deletions

View File

@ -9,7 +9,7 @@ content_type: concept
<!-- overview -->
{{< feature-state for_k8s_version="v1.34" state="beta" >}}
{{< feature-state feature_gate_name="MutatingAdmissionPolicy" >}}
<!-- due to feature gate history, use manual version specification here -->
This page provides an overview of _MutatingAdmissionPolicies_.
@ -19,7 +19,7 @@ If you want to use declarative policies just to prevent a particular kind of cha
is
a simpler and more effective alternative.
To use the feature, enable the `MutatingAdmissionPolicy` feature gate (which is off by default) and set `--runtime-config=admissionregistration.k8s.io/v1beta1=true` on the kube-apiserver.
<!-- body -->

View File

@ -6,17 +6,21 @@ _build:
render: false
stages:
- stage: alpha
- stage: alpha
defaultValue: false
fromVersion: "1.30"
toVersion: "1.33"
- stage: beta
defaultValue: false
fromVersion: "1.34"
toVersion: "1.35"
- stage: stable
defaultValue: true
fromVersion: "1.36"
---
Enable [MutatingAdmissionPolicy](/docs/reference/access-authn-authz/mutating-admission-policy/) support, which allows
[CEL](/docs/reference/using-api/cel/) mutations to
be applied during admission control.
For Kubernetes v1.30 and v1.31, this feature gate existed but had no effect.
For Kubernetes v1.30 and v1.31, this feature gate existed but had no effect.

View File

@ -1,4 +1,4 @@
apiVersion: admissionregistration.k8s.io/v1beta1
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingAdmissionPolicy
metadata:
name: "sidecar-policy.example.com"

View File

@ -1,4 +1,4 @@
apiVersion: admissionregistration.k8s.io/v1beta1
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingAdmissionPolicy
metadata:
name: "sidecar-policy.example.com"