Admission Controllers
Admission Controllers allow you to add additional options to Kubernetes for modifying or validating objects during Kubernetes API requests. If a request is rejected as a result of a controller operation, the entire request to the API server is rejected, and an error is returned to the end user.
To activate Admission Controllers, you must specify the names of the controllers as a list when creating or updating a cluster. After that, the kube-apiserver will be started or restarted with the --enable-admission-plugins option and the specified Admission Controllers.
If you pass a controller that is not available for the current version of Kubernetes, the corresponding error will be returned.
You can get information about available controllers for each of the available Kubernetes versions by making a request to the Managed Kubernetes API.