Developer (service-owner)K8S api-serverAdmission Controller ServiceRun "kubectl exec ..." commandAdmit "exec" request by calling the validating webhookAllow the exec admission requestExecute the exec commandEvict tagged pods after a predefined intervalloopEvictPod()Execute the eviction commandDeveloper (service-owner)K8S api-serverAdmission Controller Service