Using Admission Controllers to Detect Container Drift at Runtime
kubernetes.io