We need admission controllers to avoid manual edits to the directpvdrives and directpvvolumes. These operations are risky and may lead to data loss
solution :-
- Enhance the existing admission controller and add checks to accept updates only if it is comes via
kubectl-directpv
- Enable admission controller by default and add a flag say
--disable-admission-controller in the installation to disable the admission controller (this flag will be useful for manual debugging)