ValidatingAdmissionPolicyBinding [api_object]ai-synthesized · conf 0.82
ValidatingAdmissionPolicyBinding binds the ValidatingAdmissionPolicy with paramerized resources. ValidatingAdmissionPolicyBinding and parameter CRDs together define how cluster administrators configure policies for clusters. For a given admission request, each binding will cause its policy to be evaluated N times, where N is 1 for policies/bindings that don't use params, otherwise N is the number of parameters selected by the binding. The CEL expressions of a policy must have a computed CEL cost below the maximum CEL budget. Each evaluation of the policy is given an independent CEL cost budget. Adding/removing policies, bindings, or params can not affect whether a given (policy, binding, param) combination is within its own CEL budget.
A ValidatingAdmissionPolicyBinding is an API resource that represents a binding between a ValidatingAdmissionPolicy and a namespace.
Why it matters It allows administrators to enforce validation policies on specific namespaces.
Key facts - Represents a binding between a ValidatingAdmissionPolicy and a namespace - Enforces validation policies on specific namespaces
Common pitfalls - Incorrectly configured bindings can lead to policy enforcement errors
Related ValidatingAdmissionPolicy, Namespace