API server

It announces changes through Watch mechanism
It does Authorization and Authentication
Then the request gets checked by Admission Controller