Skip to content

Commit 0338db1

Browse files
committed
add exempt api kinds in mutating admission policies doc
1 parent 37017f4 commit 0338db1

File tree

2 files changed

+17
-2
lines changed

2 files changed

+17
-2
lines changed

content/en/docs/reference/access-authn-authz/mutating-admission-policy.md

+16-1
Original file line numberDiff line numberDiff line change
@@ -213,4 +213,19 @@ as well as:
213213

214214
- `jsonpatch.escapeKey` - Performs JSONPatch key escaping. `~` and `/` are escaped as `~0` and `~1` respectively.
215215

216-
Only property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible.
216+
Only property names of the form `[a-zA-Z_.-/][a-zA-Z0-9_.-/]*` are accessible.
217+
218+
## API kinds exempt from mutating admission
219+
220+
There are certain API kinds that are exempt from admission-time mutation. For example, you can't create a MutatingAdmissionPolicy that changes a MutatingAdmissionPolicy.
221+
222+
The list of exempt API kinds is:
223+
224+
* [ValidatingAdmissionPolicies]({{< relref "/docs/reference/kubernetes-api/policy-resources/validating-admission-policy-v1/" >}})
225+
* [ValidatingAdmissionPolicyBindings]({{< relref "/docs/reference/kubernetes-api/policy-resources/validating-admission-policy-binding-v1/" >}})
226+
* MutatingAdmissionPolicies
227+
* MutatingAdmissionPolicyBindings
228+
* [TokenReviews]({{< relref "/docs/reference/kubernetes-api/authentication-resources/token-review-v1/" >}})
229+
* [LocalSubjectAccessReviews]({{< relref "/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1/" >}})
230+
* [SelfSubjectAccessReviews]({{< relref "/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1/" >}})
231+
* [SelfSubjectReviews]({{< relref "/docs/reference/kubernetes-api/authentication-resources/self-subject-review-v1/" >}})

content/en/docs/reference/access-authn-authz/validating-admission-policy.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -513,5 +513,5 @@ The list of exempt API kinds is:
513513
* MutatingAdmissionPolicyBindings
514514
* [TokenReviews]({{< relref "/docs/reference/kubernetes-api/authentication-resources/token-review-v1/" >}})
515515
* [LocalSubjectAccessReviews]({{< relref "/docs/reference/kubernetes-api/authorization-resources/local-subject-access-review-v1/" >}})
516-
* [SelfSubjectAccessReviews]({{< relref "/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1/">}})
516+
* [SelfSubjectAccessReviews]({{< relref "/docs/reference/kubernetes-api/authorization-resources/self-subject-access-review-v1/" >}})
517517
* [SelfSubjectReviews]({{< relref "/docs/reference/kubernetes-api/authentication-resources/self-subject-review-v1/" >}})

0 commit comments

Comments
 (0)