What is the role of "ValidatingAdmissionPolicy" (a newer Kubernetes feature) compared to validating admission webhooks?
Correct! Well done.
Incorrect.
The correct answer is B) ValidatingAdmissionPolicy lets you define validation rules declaratively using CEL directly in the API server, avoiding the latency, availability dependency, and overhead of running a separate webhook server for common cases
Correct Answer
ValidatingAdmissionPolicy lets you define validation rules declaratively using CEL directly in the API server, avoiding the latency, availability dependency, and overhead of running a separate webhook server for common cases
By evaluating CEL expressions in-process within the API server, ValidatingAdmissionPolicy avoids the extra network hop, latency, and potential single point of failure that an external webhook server introduces, for policies expressible in CEL.