💻 Tech
Admission controllers perform another layer of security after authentication and authorization. One of the controllers, which is already deprecated, is NamespaceAutoProvision
, a plugin that automatically creates a namespace if a create resource command uses a namespace that doesn’t exist.
Check existing plugins: ps -ef | grep kube-apiserver | grep admission-plugins
Then add the plugin in this file: /etc/kubernetes/manifests/kube-apiserver.yaml
Add this entry: - --enable-admission-plugins=NamespaceAutoProvision