# Kubernetes admission controller

A Kubernetes admission controller is a plugin that governs Kubernetes API server behavior and can enforce security policies and best practices in a cluster.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## One timezone for everything: k8tz and the Jakarta timestamp problem

DevFeed: [One timezone for everything: k8tz and the Jakarta timestamp problem](<https://devfeed.tech/articles/one-timezone-for-everything-k8tz-and-the-jakarta-timestamp-problem-34030.md>)

Original publisher: [Read original article](<https://andikaahmad.com/blog/k8tz-timezone-injection/>)

Published: 2024-11-20T00:00:00Z

Content type: article

Language: en

Sources: [Andika Ahmad Ramadhan -- Blog](<https://devfeed.tech/sources/andika-ahmad-ramadhan-blog.md>)

Topics: [Kubernetes admission controller](<https://devfeed.tech/topics/kubernetes-admission-controller.md>), [timezone](<https://devfeed.tech/topics/timezone.md>), [certificates](<https://devfeed.tech/topics/certificates.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [elasticsearch](<https://devfeed.tech/topics/elasticsearch.md>)

Tags: [certificates](<https://devfeed.tech/tags/certificates.md>), [elasticsearch](<https://devfeed.tech/tags/elasticsearch.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [timezone](<https://devfeed.tech/tags/timezone.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

The article explains how k8tz applies Asia/Jakarta to Kubernetes pods through an admission controller, allowing public images such as Fluentd and Elasticsearch to use the platform timezone without image changes. It also describes three upstream patches for cert-manager support, certificate rotation without restarts, and configurable initContainer names.

### Source excerpt

How we used k8tz to force Asia/Jakarta onto public images like Fluentd and Elasticsearch, and the three patches I sent upstream.

## Sigstore policy-controller 101

DevFeed: [Sigstore policy-controller 101](<https://devfeed.tech/articles/sigstore-policy-controller-101-13232.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/sigstore-policy-controller-101>)

Published: 2023-03-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [sigstore policy controller](<https://devfeed.tech/topics/sigstore-policy-controller.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Kubernetes admission controller](<https://devfeed.tech/topics/kubernetes-admission-controller.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>)

Tags: [admission-controller](<https://devfeed.tech/tags/admission-controller.md>), [cicd](<https://devfeed.tech/tags/cicd.md>), [cloud-native](<https://devfeed.tech/tags/cloud-native.md>), [cluster-security](<https://devfeed.tech/tags/cluster-security.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [cosign](<https://devfeed.tech/tags/cosign.md>), [getting-started](<https://devfeed.tech/tags/getting-started.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-admission-controller](<https://devfeed.tech/tags/kubernetes-admission-controller.md>), [kubernetes-clusters](<https://devfeed.tech/tags/kubernetes-clusters.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [signing-containers](<https://devfeed.tech/tags/signing-containers.md>), [sigstore](<https://devfeed.tech/tags/sigstore.md>), [sigstore-policy-controller](<https://devfeed.tech/tags/sigstore-policy-controller.md>), [software-supply-chain-security](<https://devfeed.tech/tags/software-supply-chain-security.md>)

### AI overview

This tutorial introduces Sigstore policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard. It explains how to install the controller in a local kind cluster and configure declarative policies for trusted registries, signed images, and other container conditions.

### Source excerpt

Chainguard breaks down the benefits of Sigstore's policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard.