Download for MacApple silicon, macOS 14+
Skill

admission-control

@grafana Updated 2026-10-17

Use when the user asks to "write a validator", "add validation", "implement admission control", "write a mutating webhook", "add a mutation handler", "validate incoming resources", "implement admission logic", "add admission webhooks", "write ingress validation", or asks how to validate or mutate resources before they are persisted in a grafana-app-sdk app. Provides guidance on implementing validation and mutation admission handlers for grafana-app-sdk apps.

Install

With your agent

Install OMGSkills skill "grafana/skills:admission-control" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.

Manual command

git clone https://github.com/grafana/skills /tmp/skills && ln -s /tmp/skills/skills/grafana-app-sdk/admission-control ~/.claude/skills/admission-control

From README

Admission Control Admission control intercepts resource create/update requests before they are persisted. In grafana-app-sdk there are two types: Validation — accept or reject a request; cannot modify the resource Mutation — modify the resource before it is persisted (e.g. set defaults, normalize fields) The app business logic for admission is identical whether the app runs as a standalone operator or inside grafana/apps. The only difference is the runtime: standalone apps stand up their own webhook server; grafana/apps apps have admission auto-registered as a Kubernetes plugin. Getting Stubs For standalone apps, if pkg/app/app.go does not yet exist, a stub App can be generated with: This creates scaffolded simple.App which admission handlers can be added to for each kind in ManagedKinds.