logo
Dates

Author


Conferences

Tags

Sort by:  

Authors: Cici Huang
2023-04-20

tldr - powered by Generative AI

The presentation discusses the use of Common Expression Language (CEL) in Kubernetes to simplify validation and policy enforcement for Custom Resource Definitions (CRDs) and other use cases.
  • CRDs and other use cases require validation and policy enforcement that cannot be supported by structural schema and OpenAPI V3 validation
  • Webhooks have been the only solution for these use cases, but they are difficult to configure and can cause controlling outages
  • Common Expression Language (CEL) is a simpler solution that has been successfully integrated with Kubernetes data system for both CRD and native types
  • CEL comes with a standard library and an extended library, and it is easy to extend and embed
  • CEL can be used for validation, policy enforcement, and authorization checks
  • The presentation offers examples of CEL code and use cases, and it mentions future plans for mutating admission policy and client-side validation 2