Admission Controllers

Admission Controllers (access controllers) allow you to add additional options to your Kubernetes operation to modify or validate objects when making requests to the Kubernetes API. If the controller results in a rejected request, the entire request to the API server is rejected and an error is returned to the end user.

To activate access controllers, you must specify the names of the controllers as a list when creating or updating a cluster. Then kube-apiserver will be started or restarted with the --enable-admission-plugins option and the specified access controllers.

If you pass a controller that is not available for the current version of Kubernetes, an error will be returned.

Get information about available controllers for each available version of Kubernetes by querying API.