Admission Controller

Admission controllers are code that intercepts Kubernetes API server requests before object persistence. They are configurable and can be validating, mutating, or both. They can reject requests, and mutating controllers can modify objects while validating controllers cannot. The Kubernetes documentation has information on admission controllers.