CEL extensions¶

The CEL engine used to evaluate variables and authorization rules has been extended with libraries to help processing the input CheckRequest and forge the corresponding CheckResponse.

Envoy plugin libraries¶

• Envoy
• Jwt

Common libraries¶

The libraries below are common CEL extensions enabled in the Kyverno Authz Server CEL engine:

• Optional types
• Cross type numeric comparisons
• Bindings
• Encoders
• Lists
• Math
• Protos
• Sets
• Strings

Kubernetes libraries¶

The libraries below are imported from Kubernetes:

• CIDR
• Format
• IP
• Lists
• Regex
• URL