anchor.diff:    containers:
     - image: <internal registry IP>:5000/<namespace>/image-policy-check:latest
       name: first
  -```+----
  
positive.code:   containers:
    - image: different-registry/openshift/image-policy-check:latest
      name: first
  ```
  
  Create a pod pointing to the internal registry using the imported image.  The pod should be created and
  if you look at the image specification, you should see a digest in place of the tag.
  ```
  apiVersion: v1
  kind: Pod
  metadata:
  
negative.code:           - docker.io
  
  ----
  <1> Try to resolve images to an immutable image digest and update the image pull specification in the pod.
  <2> Array of rules to evaluate against incoming resources. If you only have reject==true rules,
      the default is *allow all*. If you have any accept rule, the default is *deny all*.
  <3> Indicates which resources to enforce rules upon. If nothing is specified, the default is *pods*.
  <4> Indicates that if this rule matches, the pod should be rejected.
  <5> List of annotations to match on the image object's metadata.
  <6> If you are not able to resolve the image, do not fail the pod.
  ====
  
  [[image-policy-testing-image-policy-admission-plug-in]]
  == Testing the ImagePolicy Admission Plug-in
  
  . Use the `openshift/image-policy-check` to test your configuration.
  +
  For example, use the information above, then test like this:
  +
  ----
  oc import-image openshift/image-policy-check:latest --confirm
  ----
  
  . Create a pod using this YAML. The pod should be created.
  +
  ----
  apiVersion: v1
  kind: Pod
  metadata:
  