Worked on the kubernetes/kubernetes repository to deliver ImageVolume support within restricted Pod Security Admission profiles. This involved updating validation logic and expanding test automation to recognize ImageVolume as a valid type, which reduced false positives and allowed more compatible workloads under strict security settings. The engineering approach focused on backend development using Go, integrating closely with the PSA admission framework to ensure robust validation and comprehensive test coverage. By enabling ImageVolume in restricted profiles, the work improved Kubernetes’ security posture while supporting legitimate use cases, demonstrating a methodical approach to feature delivery and collaboration within a core open-source project.