Validation: https://github.com/kelseyhightower/denyenv-validating-admission-webhook
Mutation: https://github.com/nsubrahm/k8s-mutating-webhook