Admission Controllers
Admission Controllers (admission controllers) allow you to add extra options to Kubernetes to modify or validate objects when requests are made to the Kubernetes API. If a controller rejects a request, the entire request to the API server is rejected, and an error is returned to the end user.
To enable admission controllers, you must specify their names as a list when creating or updating a cluster. After that, the kube-apiserver will be started or restarted with the --enable-admission-plugins option and the specified admission controllers.
If you pass a controller that is not available for the current version of Kubernetes, the corresponding error will be returned.
You can get information about available controllers for each of the available Kubernetes versions by making a request to the Managed Kubernetes API.