skip to content
Alvin Lucillo

Admission controllers

/ 1 min read

💻 Tech

Admission controllers perform another layer of security after authentication and authorization. One of the controllers, which is already deprecated, is NamespaceAutoProvision, a plugin that automatically creates a namespace if a create resource command uses a namespace that doesn’t exist.

Check existing plugins: ps -ef | grep kube-apiserver | grep admission-plugins Then add the plugin in this file: /etc/kubernetes/manifests/kube-apiserver.yaml Add this entry: - --enable-admission-plugins=NamespaceAutoProvision