The validating admission policy is not stable until 1.30 (1.26/27 -> beta, 1.28/29 -> alpha, 1.30 -> stable)

For mutating policies we might have to wait a few versions (in 1.34 is in beta): https://kubernetes.io/docs/reference/access-authn-authz/mutating-admission-policy/

This is useful to test the expressions https://playcel.undistro.io/

I'll start adding it to jobs-api, as they don't need to be created on each namespace, instead they are cluster-wide and matching namespaces by labels.