DefaultMCSAllocation returns a label from the MCS range that matches the offset within the overall range.

NewRepair creates a controller that periodically ensures that all UIDs labels that are allocated in the cluster are claimed.

NamespaceSecurityDefaultsController allocates uids/labels for namespaces.

Repair is a controller loop that periodically examines all UID allocations and logs any errors, and then sets the compacted and accurate list of both Can be run at infrequent intervals, and is best performed on startup of the master.