Admission Controllers in Kubernetes

They are code in api-server which check the arriving data in a request to modify a resource. They do not apply to read requests.

Admission controller are applied after the authentication + authorization phase.

Some examples are - NameSpaceExists, EventRateLimit, etc. Full list at docs.

To check which plugins are enabled by default:

kube-apiserver -h | grep enable-admission-plugins