Admission Controller Policies
Admission Controller policies are enforced at the Kubernetes cluster level to allow or block container deployments based on image compliance. When an image violates a policy, CS either blocks the image from being admitted to the cluster or generates a warning, depending on the configured policy behavior.
To view Admission Controller policies, go to Policies in the left navigation menu and click the Admission Controller tab.
Policy List
The policy list displays the following information for each Admission Controller policy.
| Column | Description |
|---|---|
| Policy Name | The name of the policy. Click the name to view or edit the policy details. A subtitle below the name may show the cluster or namespace filter applied to the policy. |
| Policy Scope | Indicates the scope of the policy: Custom (applies to specific clusters, namespaces, or deployments), or Organization (applies across the organization). |
| Policy Mode | Shows whether the policy is Active (enforced) or Inactive (not enforced). |
| Policy Behavior | The action taken when a policy violation is detected: Block prevents non-compliant images from being admitted to the cluster; Warn allows the image to proceed with a warning. |
| Created By | The username and date when the policy was created. |
| Updated By | The username and date when the policy was last modified. |
Quick Filters
Use the Policy Mode quick filter in the left panel to narrow the list by Active or Inactive policies.
Creating an Admission Controller Policy
Click Create Policy to define a new Admission Controller policy. You can configure the policy scope, target clusters, namespaces, or deployments, and set the enforcement behavior.
For step-by-step instructions, refer to Creating Security Policies.
Also see,
Policies