What are Kubernetes admission controllers?

What are Kubernetes admission controllers?

Kubernetes admission controllers are plugins that govern and enforce how the cluster is used. They intercept requests to the Kubernetes API server before persistence of the object, allowing you to validate or modify requests.

Can you give me examples of admission controllers?

Sure! Some common examples include the NamespaceLifecycle, which manages namespaces, and the PodSecurityPolicy, which controls security settings for pods.

How do I configure an admission controller?

To configure an admission controller, you typically need to modify the API server's startup parameters to include the controller you want to enable, along with any necessary configuration options.

What happens if an admission controller denies a request?

If an admission controller denies a request, the API server will reject the request, and the user will receive an error message indicating the reason for the denial.