# Kubernetes admission controller

Published articles for Kubernetes admission controller.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## One timezone for everything: k8tz and the Jakarta timestamp problem

DevFeed: [One timezone for everything: k8tz and the Jakarta timestamp problem](<https://devfeed.tech/articles/one-timezone-for-everything-k8tz-and-the-jakarta-timestamp-problem-34030.md>)

Original publisher: [Read original article](<https://andikaahmad.com/blog/k8tz-timezone-injection/>)

Published: 2024-11-20T00:00:00Z

Content type: article

Language: en

Sources: [Andika Ahmad Ramadhan -- Blog](<https://devfeed.tech/sources/andika-ahmad-ramadhan-blog.md>)

Topics: [Kubernetes admission controller](<https://devfeed.tech/topics/kubernetes-admission-controller.md>), [timezone](<https://devfeed.tech/topics/timezone.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [elasticsearch](<https://devfeed.tech/topics/elasticsearch.md>)

Tags: [certificates](<https://devfeed.tech/tags/certificates.md>), [elasticsearch](<https://devfeed.tech/tags/elasticsearch.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [timezone](<https://devfeed.tech/tags/timezone.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

The article explains how k8tz applies Asia/Jakarta to Kubernetes pods through an admission controller, allowing public images such as Fluentd and Elasticsearch to use the platform timezone without image changes. It also describes three upstream patches for cert-manager support, certificate rotation without restarts, and configurable initContainer names.

### Source excerpt

How we used k8tz to force Asia/Jakarta onto public images like Fluentd and Elasticsearch, and the three patches I sent upstream.

## Are Kubernetes Validating Admission Policies the end of admission controllers?

DevFeed: [Are Kubernetes Validating Admission Policies the end of admission controllers?](<https://devfeed.tech/articles/are-kubernetes-validating-admission-policies-the-end-of-admission-controllers-12889.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/are-kubernetes-validating-admission-policies-the-end-of-admission-controllers>)

Published: 2023-03-31T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [API](<https://devfeed.tech/topics/api.md>), [Structured-data](<https://devfeed.tech/topics/structured-data.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [api](<https://devfeed.tech/tags/api.md>), [api-server](<https://devfeed.tech/tags/api-server.md>), [blog-post](<https://devfeed.tech/tags/blog-post.md>), [chainguard-enforce](<https://devfeed.tech/tags/chainguard-enforce.md>), [common-expression-language](<https://devfeed.tech/tags/common-expression-language.md>), [complexity](<https://devfeed.tech/tags/complexity.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [fragmentation](<https://devfeed.tech/tags/fragmentation.md>), [integration](<https://devfeed.tech/tags/integration.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [performance](<https://devfeed.tech/tags/performance.md>), [policy](<https://devfeed.tech/tags/policy.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

The article explains how Kubernetes Validating Admission Policies, introduced in alpha in Kubernetes 1.26, let users evaluate many admission checks natively in the API server using Google's Common Expression Language (CEL). It argues that these policies improve performance, reliability, and integration by reducing reliance on webhooks, while noting that admission controllers remain necessary for policies beyond CEL's deliberately restricted capabilities.

### Source excerpt

Validating Admission Policies are here in Kubernetes 1.26. Read on to learn how they work and what they mean for admission controllers.

## Sigstore policy-controller 101

DevFeed: [Sigstore policy-controller 101](<https://devfeed.tech/articles/sigstore-policy-controller-101-13232.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/sigstore-policy-controller-101>)

Published: 2023-03-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [sigstore policy controller](<https://devfeed.tech/topics/sigstore-policy-controller.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Kubernetes admission controller](<https://devfeed.tech/topics/kubernetes-admission-controller.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [cicd](<https://devfeed.tech/tags/cicd.md>), [cloud-native](<https://devfeed.tech/tags/cloud-native.md>), [cluster-security](<https://devfeed.tech/tags/cluster-security.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [getting-started](<https://devfeed.tech/tags/getting-started.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [kubernetes-clusters](<https://devfeed.tech/tags/kubernetes-clusters.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [signing-containers](<https://devfeed.tech/tags/signing-containers.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

### AI overview

This tutorial introduces Sigstore policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard. It explains how to install the controller in a local kind cluster and configure declarative policies for trusted registries, signed images, and other container conditions.

### Source excerpt

Chainguard breaks down the benefits of Sigstore's policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard.