There are two types of webhook admission controller as of v1.10:

• ValidatingAdmissionWebhook: It can do extra customized validation to reject the request
• MutatingAdmissionWebhooks: It can mutate the object to force default policies

For more implementation information, please refer to the official documents:
https://kubernetes.io/docs/admin/extensible-admission-controllers/