Kubernetes MCP Server v1.36
Kubernetes v1.36: Admission Policies That Can't Be Deleted
Kubernetes v1.36 adds an alpha feature, manifest-based admission control, that lets admission webhooks and CEL-based ValidatingAdmissionPolicies be loaded from files on disk at API server startup via a staticManifestsDir field in the AdmissionConfiguration file. Manifest objects must have names ending in .static.k8s.io, and the files are watched at runtime with atomic swaps, keeping the previous configuration if validation fails. The feature can also be used to write policies that block modification or deletion of API-based admission resources.
What changes for platform teams
Platform teams can make baseline admission policies active from API server start and protect them from deletion by cluster admins, without depending on API state. Manifest-based configurations are self-contained: they cannot reference API resources, webhooks must be URL-only, and multiple API servers each load their own files with no cross-server sync.
No itemized notes for this release.
Full release notes ↗ · all Kubernetes MCP Server releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules