Admission Controllers

Admission Controllers (access controllers) allow you to add additional options to the Kubernetes operation to modify or validate objects when making requests to the Kubernetes API. If the controller results in a rejected request, the entire request to the API server is rejected and an error is returned to the end user.

In order to activate access controllers, it is necessary to specify the names of controllers as a list when creating or updating the cluster. After that kube-apiserver will be started or restarted with the option --enable-admission-plugins and the specified access controllers.

If you pass a controller that is not available for the current version of Kubernetes, an error will be returned.

To get information about available controllers for each of the available Kubernetes versions, you can query the API Managed Kubernetes.