Kubernetes admission webhooks extend the API server by allowing custom logic to intercept requests that create, update, or delete objects. There are two types of admission webhooks: validating webhooks, which assess and either approve or reject requests without changing them, and mutating webhooks, which can modify objects in-flight before they are persisted in the cluster.
Building a Kubernetes Mutating Admission Webhook



