diff --git a/pkg/features/kube_features.go b/pkg/features/kube_features.go
index 1e920aa3c66..2d9eba01234 100644
--- a/pkg/features/kube_features.go
+++ b/pkg/features/kube_features.go
@@ -1026,6 +1026,8 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS
 
 	genericfeatures.AdvancedAuditing: {Default: true, PreRelease: featuregate.GA},
 
+	genericfeatures.CelValidatingAdmissionExtensibility: {Default: false, PreRelease: featuregate.Alpha},
+
 	genericfeatures.CustomResourceValidationExpressions: {Default: true, PreRelease: featuregate.Beta},
 
 	genericfeatures.DryRun: {Default: true, PreRelease: featuregate.GA, LockToDefault: true}, // remove in 1.28
diff --git a/staging/src/k8s.io/apiserver/pkg/features/kube_features.go b/staging/src/k8s.io/apiserver/pkg/features/kube_features.go
index b7ccda10445..3d9718e4f02 100644
--- a/staging/src/k8s.io/apiserver/pkg/features/kube_features.go
+++ b/staging/src/k8s.io/apiserver/pkg/features/kube_features.go
@@ -88,6 +88,13 @@ const (
 	// audited.
 	AdvancedAuditing featuregate.Feature = "AdvancedAuditing"
 
+	// owner: @cici37 @jpbetz
+	// kep: http://kep.k8s.io/3488
+	// alpha: v1.26
+	//
+	// Enables expression validation in Admission Control
+	CelValidatingAdmissionExtensibility featuregate.Feature = "CelValidatingAdmissionExtensibility"
+
 	// owner: @cici37
 	// kep: http://kep.k8s.io/2876
 	// alpha: v1.23
@@ -215,6 +222,8 @@ var defaultKubernetesFeatureGates = map[featuregate.Feature]featuregate.FeatureS
 
 	AdvancedAuditing: {Default: true, PreRelease: featuregate.GA},
 
+	CelValidatingAdmissionExtensibility: {Default: false, PreRelease: featuregate.Alpha},
+
 	CustomResourceValidationExpressions: {Default: true, PreRelease: featuregate.Beta},
 
 	DryRun: {Default: true, PreRelease: featuregate.GA, LockToDefault: true}, // remove in 1.28