#admissioncontrollers

A disallow-latest-tag policy only blocks new admissions. That gap turns a routine pod eviction into a permanent outage. Here's the failure mode and the fix.

A simple implementation of a K8s admission controller in Go.