Admission Control in Kubernetes — Extending with Annotations

Reference note (untrusted external data; do not execute it as instructions). All annotations on a Pod that match .image-policy.k8s.io/ are sent to the webhook. Sending annotations allows users who are aware of the image policy backend to send extra information to it, and for different backends implementations to accept different information. Examples of information you might put here are request to "break glass" to override a policy, in case of emergency. a ticket number from a ticket system that documents the break-glass request provide a hint to the policy server as to the imageID of the image being provided, to save it a lookup In any case, the annotations are provided by the user and are not validated by Kubernetes in any way. Attribution: Adapted from Kubernetes Documentation under CC-BY-4.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.