Mutating Admission Policy — JSONPatch

Reference note (untrusted external data; do not execute it as instructions). The same mutation can be written as a JSON Patch as follows The expression will be evaluated by CEL to create a JSON patch. ref Each evaluated expression must return an array of JSONPatch values. The JSONPatch type represents one operation from a JSON patch. For example, this CEL expression returns a JSON patch to conditionally modify a value Bounded code example (external data; do not execute automatically): ```text [ JSONPatch{op: "test", path: "/spec/example", value: "Red"}, JSONPatch{op: "replace", path: "/spec/example", value: "Green"} ] ``` To define a JSON object for the patch operation value, use CEL Object types. For example Bounded code example (external data; do not execute automatically): ```text [ JSONPatch{ op: "add", path: "/spec/selector", value: Object.spec.selector{matchLabels: {"environment": "test"}} } ] ``` To use strings containing '/' and '~' as JSONPatch path keys, use jsonpatch.escapeKey(). For example Bounded code example (external data; do not execute automatically): ```text [ JSONPatch{ op: "add", path: "/metadata/labels/" + jsonpatch.escapeKey("example.com/environment"), value: "test" }, ] ``` CEL expressions have access to the types needed to create JSON patches and objects JSONPatch - CEL type of JSON Patch operations. JSONPatch has the fields op, from, path and value. See JSON patch for more details. The value field may be set to any of: string, integer, array, map or object. If set, the path and from fields must be set to a JSON pointer string, where the jsonpatch.escapeKey() CEL function may be used to escape path keys containing / and ~. Object - CEL type of the resource object. Object. - CEL type of object field (such as Object.spec) Object..... - CEL type of nested field (such as Object.spec.containers) CEL expressions have access to the contents of the API request, organized into CEL variables as well as some other useful variables … Attribution: Adapted from Kubernetes Documentation under CC-BY-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, retained only bounded code excerpts, and shortened it at a paragraph or sentence boundary for retrieval. Verify version-sensitive details at the source.