CEL for Kubernetes - Production-Ready Policy Generator

Generate solid, high-quality, production-ready CEL (Common Expression Language) code for Kubernetes admission control, CRD validation, and security policy enforcement.

When to Use This Skill

Use this skill when the user wants to:

• Write ValidatingAdmissionPolicy resources with CEL expressions
• Create CRD validation rules using x-kubernetes-validations
• Enforce security policies (Pod Security Standards, image restrictions, etc.)
• Validate resource configurations (labels, annotations, resource limits)
• Build admission control without external webhooks
• Migrate from OPA/Gatekeeper/Kyverno to native Kubernetes CEL
• Debug or optimize existing CEL expressions

CEL Quick Reference

Core Operators