Getting Chills, That Sounds Scary.

You might say, this is such an essential service. I need it to be up, even if the related service is broken or unavailable. But otherwise, you could be opening yourself up for sabotage. Because admission controller is essential the way you're serving it. For example, when you're enforcing security policies, you want it to fail closed. You don't want someone to do that to your admission controller and then be able to deploy workloads that are not always allowed. That's what I was thinking. So in most cases, the default is to fail closed - but filling open is desirable as well.