beta API version · group admissionregistration.k8s.io

admissionregistration.k8s.io/v1beta1

Partly removed

Kinds in admissionregistration.k8s.io/v1beta1

Kind	Introduced	Deprecated	Stops being served	Use instead
MutatingAdmissionPolicy beta · off by default	1.34	1.37	1.40 (planned)	admissionregistration.k8s.io/v1
MutatingAdmissionPolicyBinding beta · off by default	1.34	1.37	1.40 (planned)	admissionregistration.k8s.io/v1
MutatingWebhookConfiguration	1.9	1.16	1.22	admissionregistration.k8s.io/v1
ValidatingAdmissionPolicy beta · off by default	1.28	1.31	1.34	admissionregistration.k8s.io/v1
ValidatingAdmissionPolicyBinding beta · off by default	1.28	1.31	1.34	admissionregistration.k8s.io/v1
ValidatingWebhookConfiguration	1.9	1.16	1.22	admissionregistration.k8s.io/v1

Served in which releases

Kind162025303537

MutatingAdmissionPolicy

MutatingAdmissionPolicyBinding

MutatingWebhookConfiguration

ValidatingAdmissionPolicy

ValidatingAdmissionPolicyBinding

ValidatingWebhookConfiguration

served served, deprecated exists but off by default not served · 1.16 to 1.37

Migrating off admissionregistration.k8s.io/v1beta1

Webhook resources removed in 1.22

Move to admissionregistration.k8s.io/v1, served since 1.16. Existing objects stay readable through the new version.

What changes:

webhooks[*].failurePolicy default changed from Ignore to Fail for v1
webhooks[*].matchPolicy default changed from Exact to Equivalent for v1
webhooks[*].timeoutSeconds default changed from 30s to 10s for v1
webhooks[*].sideEffects default value is removed, and the field made required, and only None and NoneOnDryRun are permitted for v1
webhooks[*].admissionReviewVersions default value is removed and the field made required for v1 (supported versions for AdmissionReview are v1 and v1beta1)
webhooks[*].name must be unique in the list for objects created via admissionregistration.k8s.io/v1

- apiVersion: admissionregistration.k8s.io/v1beta1
+ apiVersion: admissionregistration.k8s.io/v1
  kind: MutatingWebhookConfiguration

To convert files mechanically: kubectl convert -f old.yaml --output-version admissionregistration.k8s.io/v1 (the kubectl-convert plugin, installed separately). Review defaults it fills in.

Other versions of admissionregistration.k8s.io

admissionregistration.k8s.io/v1 Stable

Check your manifests for admissionregistration.k8s.io/v1beta1 and other removed versions →