skills.rest
tyrchen
tyrchenCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

cel-k8s

Generate CEL policies for Kubernetes admission control and CRD validation.

45|11|Updated Nov 10, 2025
Search Tags:#automation#security#kubernetes#policies#cel#validatingadmissionpolicy#crd-validation
One-click install
npx skills add https://github.com/tyrchen/claude-skills --skill cel-k8s
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cel-k8s
Source: https://github.com/tyrchen/claude-skills/tree/main/cel
Command: npx skills add https://github.com/tyrchen/claude-skills --skill cel-k8s

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

CEL for Kubernetes policy authoring enables writing robust admission policies and CRD validations to enforce security and governance.

Core Features & Use Cases

  • Generate production-ready CEL expressions for ValidatingAdmissionPolicy and CRD rules.
  • Migrate from OPA/Gatekeeper to native CEL, debug expressions, and extend policy libraries.
  • Use cases include enforcing security constraints, resource validation, and policy standardization.

Quick Start

Provide a sample CEL policy for a Kubernetes resource to start.

Frequently Asked Questions about cel-k8s

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I write production-ready CEL policies for Kubernetes ValidatingAdmissionPolicy?▼

Production-ready CEL policies for Kubernetes ValidatingAdmissionPolicy are generated by applying Kubernetes-specific CEL extensions, context variables, and safe patterns. This ensures robust admission control and security enforcement for cluster resources.

What is the best way to migrate from OPA Gatekeeper to native Kubernetes CEL?▼

Migrating from OPA Gatekeeper to native Kubernetes CEL involves translating existing policy logic into ValidatingAdmissionPolicy resources. This approach standardizes policy enforcement and eliminates external policy engine dependencies within the cluster.

How do I use CEL for CRD validation in Kubernetes?▼

Using CEL for CRD validation in Kubernetes involves writing CEL expressions directly within Custom Resource Definition rules. This enforces strict schema constraints and resource validation natively without requiring separate webhook deployments.

Does Kubernetes ValidatingAdmissionPolicy support context variables and custom functions?▼

Kubernetes ValidatingAdmissionPolicy supports context variables and Kubernetes-specific CEL functions. These extensions allow policies to safely access resource attributes and enforce complex security constraints during admission control.

Why is my Kubernetes CEL expression not working in ValidatingAdmissionPolicyBinding?▼

Kubernetes CEL expressions in ValidatingAdmissionPolicyBinding may fail due to incorrect context variable usage or unsupported functions. Debugging CEL expressions requires validating syntax against Kubernetes-specific CEL extensions and admission control patterns.

Related Skills

Explore More Software Engineering Skills→
jeremylongshorejeremylongshore
2.6k

creating-kubernetes-deployments

Generate Kubernetes YAML manifests with health checks, autoscaling, and TLS.

Community
Advanced
erikstmartinerikstmartin
16

kubernetes-specialist

Deploy and manage Kubernetes workloads with declarative manifests, RBAC, and NetworkPolicies.

Community
Advanced
ssmleossmleo

gke-security

Configure GKE cluster security with IAM, RBAC, and Secret Manager.

Community
Advanced
ancolemanancoleman
503

resource-tagging

Implement and enforce cloud resource tagging strategies across AWS, Azure, GCP, and Kubernetes.

Community
Advanced