Enforcement of kube-version constraint