See the upstream issue for all the details:

https://github.com/kubernetes-sigs/security-profiles-operator/issues/677

tl;dr when recording a deployment (or a RS, or a DS) creates a policy per replica. We need a single policy with a union of the per-replica policies.

Acceptance criteria:

• recording a ReplicaSet,Deployment or a DeamonSet with SPO should produce a single policy