Budget analytics finds valid object creates rejected after a recent kube-apiserver flag change around admission. What should be investigated first?
Select an answer to reveal the explanation.
Short Explanation
Admission is the API's bouncer. If someone flipped apiserver flags wrong, good objects get bounced at the door—check admission plugin configuration before blaming DNS or metrics.
Full Explanation
Admission control runs in the API server and can deny creates/updates based on enabled plugins and configuration flags. Mis-set admission-related apiserver options commonly reject valid objects. CoreDNS typos, missing metrics-server, and NodePort conflicts are not the primary explanation for sudden admission denials after apiserver flag changes.