Kubernetes v1.36: Admission Policies That Can't Be Deleted

{
  "id": "9974de28ea6ac9d6fd270a48ec4c9af2d9b2de10a546739e8ed57766e4994780",
  "url": "https://kubernetes.io/blog/2026/05/04/kubernetes-v1-36-manifest-based-admission-control/",
  "method": "llm",
  "payload": {
    "kind": "other",
    "title": "Kubernetes v1.36: Admission Policies That Can't Be Deleted",
    "summary": "Kubernetes v1.36 introduces an alpha manifest-based admission control feature that loads admission policies from files at API server startup and can protect API-based admission resources from modification or deletion.",
    "evidence": "Kubernetes v1.36 introduces an alpha feature that addresses this: manifest-based admission control. It lets you define admission webhooks and CEL-based policies as files on disk, loaded by the API server at startup, before it serves any requests.",
    "products": [
      {
        "name": {
          "value": "Kubernetes",
          "evidence": "To try this in Kubernetes v1.36:"
        },
        "prerequisites": [
          {
            "value": "Enable the ManifestBasedAdmissionControlConfig feature gate for each kube-apiserver.",
            "evidence": "Enable the ManifestBasedAdmissionControlConfig feature gate for each kube-apiserver."
          }
        ],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-kubernetes-blog",
  "document_id": 24068,
  "published_at": "2026-05-04T18:35:00+00:00"
}