# Are Kubernetes Validating Admission Policies the end of admission controllers?

DevFeed: [Are Kubernetes Validating Admission Policies the end of admission controllers?](<https://devfeed.tech/articles/are-kubernetes-validating-admission-policies-the-end-of-admission-controllers-12889.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/are-kubernetes-validating-admission-policies-the-end-of-admission-controllers>)

Published: 2023-03-31T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [API](<https://devfeed.tech/topics/api.md>), [Structured-data](<https://devfeed.tech/topics/structured-data.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [api](<https://devfeed.tech/tags/api.md>), [api-server](<https://devfeed.tech/tags/api-server.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [chainguard-enforce](<https://devfeed.tech/tags/chainguard-enforce.md>), [common-expression-language](<https://devfeed.tech/tags/common-expression-language.md>), [complexity](<https://devfeed.tech/tags/complexity.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [fragmentation](<https://devfeed.tech/tags/fragmentation.md>), [integration](<https://devfeed.tech/tags/integration.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [performance](<https://devfeed.tech/tags/performance.md>), [policy](<https://devfeed.tech/tags/policy.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [validation](<https://devfeed.tech/tags/validation.md>)

## AI overview

The article explains how Kubernetes Validating Admission Policies, introduced in alpha in Kubernetes 1.26, let users evaluate many admission checks natively in the API server using Google's Common Expression Language (CEL). It argues that these policies improve performance, reliability, and integration by reducing reliance on webhooks, while noting that admission controllers remain necessary for policies beyond CEL's deliberately restricted capabilities.

## Source excerpt

Validating Admission Policies are here in Kubernetes 1.26. Read on to learn how they work and what they mean for admission controllers.