From the course: Securing Containers and Kubernetes Ecosystem
Join today to access over 22,600 courses taught by industry experts or purchase this course individually.
Admission control - Kubernetes Tutorial
From the course: Securing Containers and Kubernetes Ecosystem
Admission control
- [Instructor] The admission controller plugin intercepts the request and validates it against policies before the changes to a resource are persisted. As of the writing of this course, about 30 plus different admission controllers are included in Kubernetes. Plugins are enabled while starting kube API server. The following 17 plugins are enabled by default. While we won't go through all of these plugins, it is easy to understand their function by looking at some simpler examples. Keep in mind that some of the examples we will look at are somewhat less practical and deprecated, but they help us understand the concept before getting ready for more complex ones. By enabling AlwaysAdmit plugin, you're setting all requests to be allowed. This is equal to having no admission controller at all. Keep in mind that this plugin has been deprecated. At the other end of the spectrum is AlwaysDeny plugin. With this plugin, you set all…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.