Skip to content

Kubernetes admission webhooks

Admission webhooks are HTTP callbacks that handle admission requests for Kubernetes resources.^[400-devops-06-kubernetes-k8s-learning-06ingress-readme.md] They function as interceptors, allowing custom logic to validate or mutate object configuration before it is persisted to the cluster.

Admission webhooks are typically created and managed automatically by infrastructure operators, such as when installing an Ingress Controller.^[400-devops-06-kubernetes-k8s-learning-06ingress-readme.md]

Types of admission webhooks

Webhooks are categorized by their role in the API request processing flow:

  • Validating admission webhooks: These webhooks are primarily used to enforce specific constraints or "admission" rules.^[400-devops-06-kubernetes-k8s-learning-06ingress-readme.md] They can accept or reject a request based on custom logic but generally do not modify the object.
  • Mutating admission webhooks: These webhooks may modify the object configuration before it is stored.^[400-devops-06-kubernetes-k8s-learning-06ingress-readme.md]

Sources

  • 400-devops-06-kubernetes-k8s-learning-06ingress-readme.md