We will explore how Gatekeeper can act as a front end for in-tree admission validation through validating admission policies (VAP) or admission webhooks, going over how to upgrade Gatekeeper to use VAP and how to manage Common Expression Language policies through Gatekeeper. You will leave understanding how to validate workload resources.