Cause: Image validation used to validate old image object. And image signature import controller used generate such an image. Consequence: An invalid images were pushed to etcd. Fix: Validation has been changed to validate new image object. Logic to fix some invalid images has been introduced. Controller no longer generates invalid images. Result: It's no longer possible to upload an invalid image object.