| plugin/pkg/admission/admit | |
| plugin/pkg/admission/alwayspullimages | Package alwayspullimages contains an admission controller that modifies every new Pod to force the image pull policy to Always. |
| plugin/pkg/admission/antiaffinity | LimitPodHardAntiAffinityTopology admission controller rejects any pod that specifies "hard" (RequiredDuringScheduling) anti-affinity with a TopologyKey other than unversioned.LabelHostname. |
| plugin/pkg/admission/deny | |
| plugin/pkg/admission/exec | |
| plugin/pkg/admission/gc | |
| plugin/pkg/admission/imagepolicy | Package imagepolicy contains an admission controller that configures a webhook to which policy decisions are delegated. |
| plugin/pkg/admission/initialresources | |
| plugin/pkg/admission/limitranger | |
| plugin/pkg/admission/namespace | |
| plugin/pkg/admission/namespace/autoprovision | |
| plugin/pkg/admission/namespace/exists | |
| plugin/pkg/admission/namespace/lifecycle | |
| plugin/pkg/admission/persistentvolume | |
| plugin/pkg/admission/persistentvolume/label | labels created persistent volumes with zone information as provided by the cloud provider |
| plugin/pkg/admission/podnodeselector | |
| plugin/pkg/admission/resourcequota | resourcequota enforces all incoming requests against any applied quota in the namespace context of the request |
| plugin/pkg/admission/security | security contains admission plugins specific to cluster security. |
| plugin/pkg/admission/securitycontext | |
| plugin/pkg/admission/securitycontext/scdeny | |
| plugin/pkg/admission/security/podsecuritypolicy | |
| plugin/pkg/admission/serviceaccount | serviceaccount enforces all pods having an associated serviceaccount, and all containers mounting the API token for that serviceaccount at a known location |
| plugin/pkg/admission/storageclass | |
| plugin/pkg/admission/storageclass/default | |