* PodSecurityPolicy admission sets `podsecuritypolicy.admission.k8s.io/admit-policy` and `podsecuritypolicy.admission.k8s.io/validate-policy` annotations containing the name of the policy that allowed a pod to be admitted. (PodSecurityPolicy also gained the ability to [limit hostPath volume mounts to be read-only](https://...

,uBAvMR,2EAuNQ,WAAA,iCAvNR,oFA0NU,WAAA,uBAtIV,8CA6IQ,SAAA,OlF2jVV,mDkFxsVE,2CAkJQ,WAAA,EAlJR,+CAsJQ,SAAA,OAvIR,wDA6IQ,WAAA,ErE5RN,yBqEyJE,+DAEI,IAAA,mBlF8rVR,oFkF3rVM,qFAEE,IAAA,uBAPJ,uDAWI,WAAA,mBlF4rVR,2EkFzrVM,4EAEE,WAAA,uBAIJ,uEAEI,IAAA,uBAFJ,+DAMI,WAAA,uBAIJ,kDAEI,IAAA,EAFJ,0CAMI,QAAA,MACA,SAAA,SACA,IAAA,uCARJ,8DAaM,OAAA,mBACA,WAAA,MAAA,IAAA,YACA,MAAA,OAEA,sEAAA,uEAEE,OAAA,uBAnBR,kFAyBQ,WAAA,MAAA,IAAA,YACA,MAAA,MA1BR,6CAgCI,SAAA,OACA,SAAA,MACA,IAAA,EACA,WAAA,MAAA,IAAA,YACA,MAAA,MACA,QAAA,KA...