Package alwayspullimages contains an admission controller that modifies every new Pod to force the image pull policy to Always.

Package antiaffinity provides the LimitPodHardAntiAffinityTopology admission controller.

Package eventratelimit contains an admission controller that enforces a rate limit on events.

Package imagepolicy checks a webhook for image admission.

Package podtolerationrestriction is a plugin that first verifies any conflict between a pod's tolerations and its namespace's tolerations, and rejects the pod if there's a conflict.

Package runtimeclass contains an admission controller for modifying and validating new Pods to take RuntimeClass into account.

Package security contains admission plugins specific to cluster security.

Package serviceaccount enforces all pods having an associated serviceaccount, and all containers mounting the API token for that serviceaccount at a known location.