diff --git a/roles/kubernetes/control-plane/vars/main.yaml b/roles/kubernetes/control-plane/vars/main.yaml
index d387a15bc..3775d253a 100644
--- a/roles/kubernetes/control-plane/vars/main.yaml
+++ b/roles/kubernetes/control-plane/vars/main.yaml
@@ -1,6 +1,8 @@
 ---
 # list of admission plugins that needs to be configured
+# https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/
 kube_apiserver_admission_plugins_needs_configuration:
 - EventRateLimit
+- ImagePolicyWebhook
 - PodSecurity
 - PodNodeSelector