[feature request]`NodePool Governance Capability`: Add admission webhook

[Peeknut]

What would you like to be added: Admission webhook ensures that Node Autonomy and NodePoll Autonomy will not be enabled at the same time. Admission webhook can be described as:

• Go online and offline with spirit-controller.
• For the user's request to send Node Autonomy/NodePool Autonomy, check whether one of these autonomy has been enabled, and if so, reject the request.

Why is this needed: As mentioned in the proposal(https://github.com/openyurtio/openyurt/pull/772), since NodePool Autonomy will failover the disconnected nodes, and Node Autonomy is defined as keeping disconnected nodes from failing over, so node autonomy and node pool autonomy cannot be enabled at the same time. We need to use the webhook to limit the two capabilities.

others /kind feature

[gnunu]

/assign @LindaYu17

[LindaYu17]

webhook development complete, waiting for integration with other components. add two validating webhook:

1. poolcoordiantor-webhook: validate pool-coordinator CR create/update
2. nodeautonomy-webhook: validate when annotating node as node autonomy

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[rambohe-ch]

/pinned

[rambohe-ch]

/pinned

[rambohe-ch]

/close

[openyurt-bot]

@rambohe-ch: Closing this issue.

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.