Tag: CEL

All the articles with the tag "CEL".

• 

  Flux 2.8: CEL-based health checks and what they change for release gating

  2 Sep, 2026

  Flux 2.8 adds healthCheckExprs — CEL expressions for health checks in Kustomization and HelmRelease. We cover the syntax, migrating an existing resource, and how it differs from canary checks in Argo Rollouts/Flagger.

• 

  ValidatingAdmissionPolicy: moving admission control into the API server with CEL

  21 Aug, 2026

  Kyverno 1.17 deprecates classic ClusterPolicy in favor of CEL-native ValidatingPolicy, with removal planned for v1.20. ValidatingAdmissionPolicy has been stable since Kubernetes 1.30 and runs CEL directly inside kube-apiserver — no webhook, no network hop, no separate pod. We break down the CEL expression model, migrate a real policy, and measure the latency before/after.