thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Advanced

Admission Controller

A Kubernetes API server plugin that intercepts requests after authentication and authorization to validate or mutate objects before persistence.

Definition

Built-in controllers include NamespaceLifecycle, LimitRanger, ResourceQuota, and PodSecurity. Dynamic admission webhooks (mutating and validating) power tools like OPA Gatekeeper, Kyverno, and sidecar injection. ValidatingAdmissionPolicy uses CEL in-process.

Example

Istio's mutating webhook injects Envoy sidecars into pods in labeled namespaces.

Exam tip

Order: authentication, authorization, mutating admission, schema validation, validating admission.

Related terms