ValidatingAdmissionPolicy not working for OpenShift resources

Issue

• When trying to create a ValidatingAdmissionPolicy that denies the creation of OpenShift-specific objects such as BuildConfigs or DeploymentConfigs, this does not work as expected.

• The following ValidatingAdmissionPolicy does not work as expected:

  apiVersion: admissionregistration.k8s.io/v1
  kind: ValidatingAdmissionPolicy
  metadata:
    name: deny-creation-of-build-configs
  spec:
    failurePolicy: Fail
    matchConstraints:
      resourceRules:
      - operations: ["CREATE"]
        apiGroups: ["build.openshift.io"]
        apiVersions: ["v1"]
        resources: ["buildconfigs"]
    validations:
    - expression: "false"
      message: "Creation of BuildConfigs is not allowed."
      reason: Invalid