[moochmooch]

Do you use a proprietary tool to filter containers lacking the certificate mechanisms or is this handled as part of the manifests?

[spectre013]

It's all handled as part of the manifests as well as we can have our clusters pulled if we are caught using non approved containers and they are all scanned when they are brought into the disconnected environment.