What are some examples of Kubernetes admission controllers?

What are some examples of Kubernetes admission controllers?

Kubernetes admission controllers are plugins that govern and enforce how the cluster is used. Examples include the NamespaceLifecycle, which prevents the deletion of namespaces that still have resources, and the LimitRanger, which enforces resource limits on containers.

Can you explain how the LimitRanger admission controller works?

Sure! The LimitRanger admission controller sets default resource requests and limits for containers in a namespace. If a pod does not specify these values, the LimitRanger will automatically apply the defaults, ensuring that resource usage is controlled.

Are there any admission controllers that can help with security?

Yes, the PodSecurityPolicy admission controller is designed to control security-sensitive aspects of pod specification. It allows you to define a set of conditions that a pod must meet to be accepted into the system.

How can I enable admission controllers in my Kubernetes cluster?

You can enable admission controllers by specifying them in the API server configuration. This is typically done by using the --enable-admission-plugins flag when starting the API server.