From kubewarden/allowed-proc-mount-types-psp-policy#58 (comment):
When looking into policies that have subresources as targets, things get complicated... because we have to generate a different request. See the 1st example here: the scale sub-resource of a Deployment has been changed, the policy is going not going to receive the whole Deployment inside of admissionreview.request.object, but the Scale object.
Acceptance criteria