Building a Validating Admission Webhook in Kubernetes

Kubernetes admission controllers are plugins that govern and validate requests to the API server. A validating admission webhook is an external HTTPS service that the API server calls with an AdmissionReview object. Your webhook inspects the request (e.g. “create pod”, “update deployment”) and returns an AdmissionReview response indicating whether to allow or deny it.