## Kubernetes v1.36: Admission Policies That Can't Be Deleted

- 種別: release
- 関連技術: kubernetes
- 公開日時: 2026-05-04T18:35:00.000Z
- 情報源: Kubernetes Blog (https://kubernetes.io/blog/2026/05/04/kubernetes-v1-36-manifest-based-admission-control/)
- パーマリンク: https://vulnpulse.app/items/kubernetes-3951e89e78f6

If you've ever tried to enforce a security policy across a fleet of Kubernetes clusters, you've probably run into a frustrating chicken-and-egg problem. Your admission policies are API objects, which means they don't exist until someone creates them, and they can be deleted by anyone with the right permissions. There's always a window during cluster bootstrap where your policies aren't active yet, and there's no way to prevent a privileged user from removing them. Kubernetes v1.36 introduces an alpha feature that addresses this: manifest-based admission control . It lets you define admission…