CRD Validation in Kubernetes
summary
Claims that CEL GA in 1.29 plus the x-kubernetes-validation extension lets CRDs carry expressive validation rules so admission webhooks are no longer required. Shows a kind cluster demo built with kubebuilder markers that generates CRDs enforcing replica between min and max and “even number” constraints; attempts to create invalid resources return two explicit errors, and a misspelled field in a CEL expression is caught at CRD generation time.
AI-written summary · about
chapters (8)
- 0:00CRD validation intro
- 3:01Why CRD validation matters
- 7:19Validating webhook challenges
- 8:04Simplifying CRD validation with Common Expression Language
- 10:54x-kubernetes-validation
- 13:20Live CEL demo
- 20:41CEL benefits
- 21:45Bonus tip
related talks
35mWebhook Fatigue? You're Not Alone: Introducing the CEL Expression Language Features Solving This Problem
33mA Field Guide To Integrating CEL in the Kubernetes Codebase
29mKubernetes Reloaded AKA How to Avoid the Dev Plateau with CRDs
29mKubernetes Reloaded: AKA How to Avoid the Dev Plateau with CRDs
19mKeynote: CRDs, No Longer 2nd Class Thing!
26mWriting Kubernetes Controllers for CRDs: Challenges, Approaches and Solutions
19mKeynote: CRDs, No Longer 2nd Class Thing!
34mExtending Kubernetes 101