Platform & DevOps·Secrets, identity and the supply chain
the deployment was rejected at submission because the image was unsigned and it asked to run as root.
Admission controller
Also calledadmission control, admission webhook, validating webhook
A hook in the control plane that inspects, rejects or modifies objects as they are submitted, before anything is scheduled. It is where policy becomes enforcement rather than a report, and it is also the standard way to inject sidecars and defaults. Its risk is availability: a webhook that is slow or down can block every change to the cluster, which is why failure behaviour and timeouts are the settings that matter most.