Hulumi 2.0.2 fixes a live Kubernetes CEL type-checking mismatch in the protected
Pod envelopes rendered by BrokeredAuroraPostgresBoundary and
WorkloadCapabilityIssuerBoundary.
Kubernetes exposes resource.Quantity-backed fields such as container
requests, limits, and emptyDir.sizeLimit through the admission object at
runtime, but direct typed field access produces API-server expression warnings.
With failurePolicy: Fail, those warnings correctly prevent protected Pods
from being admitted.
The corrected expressions cast only the quantity-bearing resources and
emptyDir structures to CEL's dynamic type before comparing the same exact
values. The CPU, memory, and 64 MiB temporary-volume constraints are unchanged.
Live API-server diagnostics prove that the exact object is accepted while
changed CPU and emptyDir quantities remain denied.
All six @hulumi/* packages remain on the atomic 2.0.2 release train.