Admission Control – Security Policies and Checks
Imagine a security checkpoint at a critical facility. Admission controllers in Kubernetes function similarly for your cluster. They act as gatekeepers, intercepting requests to the Kubernetes API server before resources are created, deleted, or modified. These controllers can validate or modify the requests based on predefined rules, ensuring that only authorized and properly configured resources enter the system. Also note that admission controllers do not (and cannot) block requests to read (get, watch, or list) objects.
Several key features of Kubernetes rely on specific admission controllers to function correctly. Therefore, a Kubernetes API server without the appropriate admission controllers is incomplete and will not support all expected features.
There are two types of admission controllers:
- Validation controllers: These controllers meticulously examine incoming requests. If they find anything...
