Imagine your Kubernetes API is a nightclub.
Every request (or person) wants in.
Before that happens, they face the bouncer — Admission Controllers.
These powerful components intercept API requests before they're persisted in etcd.
Types:
🔁 Mutating Admission Controllers — Modify the request object.
✅ Validating Admission Controllers — Approve/deny based on policies.
Use them for:
- Sidecar injection
- Enforcing security rules
- Labeling workloads
🛠️ Tools like Kyverno and OPA Gatekeeper make writing policies easier.
📌 Pro tip: Admission controllers are the first line of defense. Use them wisely!
What's your favorite use case for Admission Controllers?