Validating Webhook Configs view#
In Kubernetes, ValidatingAdmissionWebhooks are essential tools for enforcing policies and restrictions on resources introduced to your cluster. These webhooks allow you to validate incoming resource requests, ensuring they adhere to specific criteria and compliance standards, which helps maintain the integrity of your Kubernetes cluster. See Kubernetes Documentation: Admission Controllers Reference for details.
The Validating Webhook Configs table lists the cluster deployments. You can click the list items and open the details panel with comprehensive information and various options. You can also search for a specific item using the Search input field.
You can resize and reorder the table columns. Drag the column border in the table header to change the width. To change the column position, drag its header left or right. Also, you can sort objects in ascending or descending order by clicking the header of a column and configure the column visibility. By default, the table consists of the following columns:
Note
The table content can be exported in the CSV file format.
| Column | Description |
|---|---|
| Name | This column displays the name of each Validating Admission Webhook. |
| Webhooks | In this column, you can find detailed information about the webhook's configuration, encompassing server and client settings. |
| Age | The age column provides information on how long each webhook has been in operation. |
| More Actions |
Clicking on the button opens a drop-down list with the following actions:
|
Match conditions#
Each webhook entry can include CEL matchConditions that gate when the webhook is invoked. All match conditions inside a webhook entry must evaluate to true for the webhook to run.
Lens Desktop renders each match condition as a drawer item in the Match Conditions section of the webhook's detail panel. The condition name labels the drawer item, and the CEL expression is shown with theme-aware syntax highlighting using the same renderer as admission policies. See CEL syntax highlighting for the colour token reference.
Webhook match conditions can reference only the request-context variables object, oldObject, request, and authorizer. They do not support params, variables, or namespaceObject, because webhook configurations have no paramKind or composited variable mechanism.