Admission Controllers
Admission Controllers allow you to add additional options to Kubernetes operations to modify or validate objects during requests to the Kubernetes API. If a controller rejects a request, the entire request to the API server is rejected, and an error is returned to the end user.
To enable admission controllers, specify the controller names as a list when creating or updating a cluster. After that, kube-apiserver will be started or restarted with the --enable-admission-plugins option and the specified admission controllers.
If you pass a controller that is not available for the current version of Kubernetes, the corresponding error will be returned.
You can get information about available controllers for each available Kubernetes version using a request to the Managed Kubernetes API.