mutation-capture-lab

Overview ¶

Command mutation-capture-lab is the mutation-capture lab binary: a minimal set of recorders (native watch, audit webhook, validating admission webhook) whose output is a versioned corpus of the exact structures Kubernetes emits. It is deliberately NOT a second GitOps Reverser; see docs/spec/mutation-capture-lab-design.md.

It runs on a cluster of its own (test/mutationlab/Taskfile-lab.yml), which delivers to it the way any cluster delivers: the API server's audit webhook backend posts to /audit-webhook over mutual TLS, a ValidatingWebhookConfiguration sends admission reviews to /validate-all, and the scenario CRD's conversion webhook calls /convert.