admissionregistration.k8s.io/v1alpha1
·MutatingAdmissionPolicy
MutatingAdmissionPolicy describes the definition of an admission mutation policy that mutates the object coming into admission chain.
Click on Property Name to show the description, and Pink Types to expand schema.
Required properties are marked with *
Change History
Kubernetes v1.33
~4
4 properties have changed the description
- .spec.matchConstraints.excludeResourceRules
- .spec.matchConstraints.matchPolicy
- .spec.matchConstraints.objectSelector
- .spec.matchConstraints.resourceRules
Kubernetes v1.32
MutatingAdmissionPolicy was first seen on this version of Kubernetes
Kubernetes v1.31
Kubernetes v1.30
Kubernetes v1.29
Kubernetes v1.28
Kubernetes v1.27
Kubernetes v1.26
Kubernetes v1.25
Kubernetes v1.24
Kubernetes v1.23
Kubernetes v1.22
Kubernetes v1.21
Kubernetes v1.20
Kubernetes v1.19
Kubernetes v1.18
Kubernetes v1.17
Kubernetes v1.16
Kubernetes v1.15
Kubernetes v1.14
Kubernetes v1.13
Kubernetes v1.12
Kubernetes v1.11
Examples
There are 2 examples of MutatingAdmissionPolicy that you can use as a starting point to create your own.
apiVersion: admissionregistration.k8s.io/v1alpha1 kind: MutatingAdmissionPolicy metadata: name: simple-mutating-policy spec: matchConstraints: resourceRules: - operations: ["CREATE"] apiGroups: [""] apiVersions: ["v1"] resources: ["pods"] reinvocationPolicy: IfNeeded mutations: - patchType: "ApplyConfiguration" applyConfiguration: expression: > Object{ metadata: Object.metadata{ labels: Object.metadata.labels{ mutated: "true" } } }
apiVersion: admissionregistration.k8s.io/v1alpha1
kind: MutatingAdmissionPolicy
metadata:
name: simple-mutating-policy
spec:
matchConstraints:
resourceRules:
- operations: ["CREATE"]
apiGroups: [""]
apiVersions: ["v1"]
resources: ["pods"]
reinvocationPolicy: IfNeeded
mutations:
- patchType: "JSONPatch"
jsonPatch:
expression: >
[
JSONPatch{
op: "add", path: "/metadata/labels/mutated",
value: "true"
}
]