[{"data":1,"prerenderedAt":15},["ShallowReactive",2],{"blog-tag-en-mutatingadmissionpolicy":3},[4],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fk3s-mutatingadmissionpolicy-webhook-sidecar-injection","You Don't Need a Webhook's Certificate Headaches Anymore. MutatingAdmissionPolicy Changes How K3s Injects Sidecars","MutatingAdmissionPolicy reached GA in Kubernetes v1.36. For teams running a hand-rolled Mutating Webhook for labels or sidecar injection, how far can you replace it with CEL, and where should a webhook stay? Here's the decision framework for K3s operations.","2026-11-01",[10,11,12,13,14],"k3s","kubernetes","mutatingadmissionpolicy","cel","admission-control",1793798800443]