Modify image in annotation to skip policyController modification

main.go

@@ -147,7 +147,7 @@ func patchPodSpec(podSpec *v1.PodSpec, createAnnotationField bool) ([]byte, erro
 		patch = append(patch, map[string]interface{}{
 			"op":    "add",
 			"path":  "/metadata/annotations/image-" + sanitize(container.Name),
-			"value": container.Image,
+			"value": renameImage(container.Image),
 		})
 	}
 
@@ -157,3 +157,9 @@ func patchPodSpec(podSpec *v1.PodSpec, createAnnotationField bool) ([]byte, erro
 func sanitize(name string) string {
 	return strings.Replace(name, "-", "_", -1)
 }
+
+// Rename image name to be used as annotation key
+// The reason is that PolicyController also replaces image refereces in annotations :(
+func renameImage(name string) string {
+	return strings.Replace(name, ":", ";", -1)
+}

main_test.go

@@ -23,7 +23,7 @@ func TestPatchPodSpec(t *testing.T) {
 		},
 	}
 
-	expectedPatch := `[{"op":"add","path":"/metadata/annotations/image-container_1","value":"nginx:1.14"},{"op":"add","path":"/metadata/annotations/image-init_container_1","value":"busybox:1.28"}]`
+	expectedPatch := `[{"op":"add","path":"/metadata/annotations/image-container_1","value":"nginx;1.14"},{"op":"add","path":"/metadata/annotations/image-init_container_1","value":"busybox;1.28"}]`
 
 	patch, err := patchPodSpec(podSpec, false)
 	if err != nil {