config/pdb/pdb.yaml

apiVersion: policy/v1
kind: PodDisruptionBudget
metadata:
  name: controller-manager
spec:
  minAvailable: 1
  selector:
    matchLabels:
      azure-workload-identity.io/system: "true"