revisit Introduction, Backgrounds, RelatedWorks
Architecture: provisioner tests
Architecture: ResourceQuota: cheap admission control and object limit
Architecture: more ResourceQuota intro
un-verbify kube-apiserver
turns out to be a little over-verbing, let's leave it to only code,
fields and libraries
Architecture: ResourceQuota: whatis
Architecture: provisioner: namespace
Architecture: why kubebuilder, \verb|kube-apiserver|
Architecture: provisioner high level overview
Architecture: cel: add ingress
Architecture: explain vap example
make it more technically correct on admission control
Architecture: why cel on pod
Architecture: AlwaysPullImages
make namespace casing consistent
Architecture: PodTolerationRestriction
Architecture: admission control, PodSecurity
Architecture: ResourceExplorer