Kubernetes Admission Controllers

• https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/

• https://kubernetes.io/blog/2019/03/21/a-guide-to-kubernetes-admission-controllers/

kubectl get --raw /apis/admissionregistration.k8s.io/v1/validatingwebhookconfigurations | jq

kube-apiserver --enable-admission-plugins=NamespaceLifecycle,LimitRanger ...

Related

• Aquasec
• Aqua Enforcers
• admissionregistration.k8s.io
• Controllers
• Gatekeeper
• Ingress Controller

See also

• Admission Controllers, admissionregistration.k8s.io, validatingwebhookconfigurations, mutatingwebhookconfigurations
• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, containerSecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing, security context, readOnlyRootFilesystem, allowPrivilegeEscalation, kube-bench