50 lines
1.6 KiB
Markdown
50 lines
1.6 KiB
Markdown
---
|
||
title: 准入控制器（Admission Controller）
|
||
id: admission-controller
|
||
date: 2019-06-28
|
||
full_link: /zh/docs/reference/access-authn-authz/admission-controllers/
|
||
short_description: >
|
||
在对象持久化之前拦截 Kubernetes Api 服务器请求的一段代码
|
||
aka:
|
||
tags:
|
||
- extension
|
||
- security
|
||
---
|
||
|
||
|
||
<!--
|
||
---
|
||
title: Admission Controller
|
||
id: admission-controller
|
||
date: 2019-06-28
|
||
full_link: /docs/reference/access-authn-authz/admission-controllers/
|
||
short_description: >
|
||
A piece of code that intercepts requests to the Kubernetes API server prior to persistence of the object.
|
||
|
||
aka:
|
||
tags:
|
||
- extension
|
||
- security
|
||
---
|
||
-->
|
||
|
||
|
||
<!--
|
||
A piece of code that intercepts requests to the Kubernetes API server prior to persistence of the object.
|
||
-->
|
||
在对象持久化之前拦截 Kubernetes Api 服务器请求的一段代码
|
||
|
||
<!--more-->
|
||
|
||
<!--
|
||
Admission controllers are configurable for the Kubernetes API server and may be “validating”, “mutating”, or
|
||
both. Any admission controller may reject the request. Mutating controllers may modify the objects they admit;
|
||
validating controllers may not.
|
||
|
||
* [Admission controllers in the Kubernetes documentation](/docs/reference/access-authn-authz/admission-controllers/)
|
||
-->
|
||
|
||
准入控制器可针对 Kubernetes Api 服务器进行配置，可以执行验证，变更或两者都执行。任何准入控制器都可以拒绝访问请求。
|
||
变更（mutating）控制器可以修改其允许的对象，验证（validating）控制器则不可以。
|
||
|
||
* [Kubernetes 文档中的准入控制器](/zh/docs/reference/access-authn-authz/admission-controllers/) |