Add annotations to objects admitted by policy-controller

[jkjell]

Description

It would be awesome to see the results of policy-controller admissions recorded on affected objects.

There's a great example from Tekton Chains where they record helpful metadata:

kubectl get tr [TASKRUN_NAME] -o json | jq -r .metadata.annotations

{
  "chains.tekton.dev/signed": "true",
  ...
}

The things that seem most useful to me from the policy-controller side would be an annotation referencing the admitting or denying policy, the status, and ideally, enough details to understand the reasoning behind the policy decision.

[elfotografo007]

I can take care of this one. What is our timeline for v1?

[hectorj2f]

@elfotografo007 We don't have a defined timeline yet.

[hectorj2f]

Feel free to assign it to yourself whenever you start working on this.

[elfotografo007]

I don't have the right to assign it to me. Can you assign it?

[hectorj2f]

@elfotografo007 Done 👍!