Before Kubernetes 1.7, admission controllers needed to compile with the API server, and configure before the API server starts. Dynamic admission control is designed to break these limitations. As two major components in dynamic admission control are both not GA at the moment we wrote this book, excepting adding them into the admission control chain, additional runtime configuration is required in the API server: --runtime-config=admissionregistration.k8s.io/v1alpha1.