MutatingAdmissionPolicy

Kubernetes Validating Admission Policies: In-Process CEL Policy Enforcement Without Webhooks

ValidatingAdmissionPolicy reached GA in Kubernetes 1.30 and gives you built-in cluster policy enforcement using CEL expressions inside the API server itself. No webhooks, no OPA, no Kyverno needed for the common cases. Here is how it works and when to use it.