worth mentioning the stages of a K8S API request:

A TLS connection is established -> the request is authenticated and afterward authorized -> admission controllers act on objects being created/deleted/updated -> the request is validated using the validation routines for the corresponding API object, and then written to the object store