title: Can OPA Gatekeeper be used to audit K8s PodDisruptionBudget status fields?
body: <p>We are looking to use OPA gatekeeper to audit K8s PodDisruptionBudget (PDB) objects. In particular, we are looking to audit the number of <code>disruptionsAllowed</code> within the <code>status</code> field.</p>
  <p>I believe this field will not be available at point of admission since it is calculated and added by the apiserver once the PDB has been applied to the cluster.</p>
  <p>It appears that for e.g Pods, the <code>status</code> field is passed as part of the <code>AdmissionReview</code> object [1]. In that particular example it appears that only the pre-admission status fields make it into the <code>AdmissionReview</code> object.</p>
  <p>1.) Is it possible to audit on the current in-cluster status fields in the case of PDBs?</p>
  <p>2.) Given the intended use of OPA Gatekeeper as an admission controller, would this be considered an anti-pattern?</p>
  <p>[1] <a href="https://www.openpolicyagent.org/docs/latest/kubernetes-introduction/" rel="nofollow noreferrer">https://www.openpolicyagent.org/docs/latest/kubernetes-introduction/</a></p>