code: func Register(plugins *admission.Plugins) {
  	plugins.Register(PluginName, func(config io.Reader) (admission.Interface, error) {
  		// the pods/status endpoint is ignored by this plugin since old kubelets
  		// corrupt them.  the pod status strategy ensures status updates cannot mutate
  		// ownerRef.
  		whiteList := []whiteListItem{
  			{
  				groupResource: schema.GroupResource{Resource: "pods"},
  				subresource:   "status",
  			},
  		}
  		return &gcPermissionsEnforcement{
  			Handler:   admission.NewHandler(admission.Create, admission.Update),
  			whiteList: whiteList,
  		}, nil
  	})
  }
docs: // Register registers a plugin