Mutating Admission Webhooks

Mutating admission webhooks

Kubernetes admission controllers provide us with ways to enforce rules or restrictions on the changes to the cluster, such as updating Pod labels, limiting resource quota, preventing unexpected operations on deleting objects, etc.

Sometimes, when built-in admission plugins don’t suffice for what we need, we can use external webhooks for validating and mutating. In such an out-of-tree way, we can inject our custom logic into the Kubernetes admission control pipeline.