Kubewarden Leveraging and Extending CEL for Your Cluster Security

The Common Expressions Language (CEL) is a fast, portable, non-Turing-complete evaluation language that can simplify writing and reusing policies, and is finally here since Kubernetes 1.29: from validating CRDs to ValidatingAdmissionPolicies.

In this lightning talk we will showcase how Kubewarden, thanks to WebAssembly, reuses the very same CEL libraries from Kubernetes to provide a CEL policy that is backwards compatible. We will also learn how this Kubewarden CEL policy extends the CEL features by providing context-aware capabilities, telemetry and policy reports.