Tool to block Pod Disruption Budges where maxUnavailable is 1

openshift_block_bad_pdbs.yaml

kind: ValidatingAdmissionPolicy
apiVersion: admissionregistration.k8s.io/v1alpha1
metadata:
  name: pdb
spec:
  matchConstraints:
    resourceRules:
      - operations:
          - CREATE
        apiGroups:
          - policy
        apiVersions:
          - v1
        resources:
          - poddisruptionbudgets
        scope: '*'
    matchPolicy: Equivalent
  validations:
    - expression: object.spec.maxUnavailable > 1
  failurePolicy: Fail
---
kind: ValidatingAdmissionPolicyBinding
apiVersion: admissionregistration.k8s.io/v1alpha1
metadata:
  name: pdb-binding
spec:
  policyName: pdb
  validationActions:
    - Deny