You Don't Need a Webhook's Certificate Headaches Anymore. MutatingAdmissionPolicy Changes How K3s Injects Sidecars
MutatingAdmissionPolicy reached GA in Kubernetes v1.36. For teams running a hand-rolled Mutating Webhook for labels or sidecar injection, how far can you replace it with CEL, and where should a webhook stay? Here's the decision framework for K3s operations.