auto patch webhook objectSelector label on workload

[zmberg]

Ⅰ. Describe what this PR does

Rollout patch webhook label on workload

Currently rollout will webhook all workloads update requests, include Deployment, StatefulSet, CloneSet, Advanced StatefulSet. But not all workloads have to be rollout released, and if kruise rollout crashes will lead to workload update failed. So we can add configuration in MutatingWebhookConfiguration yaml.

apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
...
  objectSelector:
      matchExpressions:
        - key: rollouts.kruise.io/workload-type
          operator: Exists

And the rollout controller patches the above label to the workload according to the Rollout objectRef.

[codecov-commenter]

Codecov Report

Merging #158 (082e0a5) into master (88e4bb7) will decrease coverage by 0.37%.
The diff coverage is 0.00%.

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.

@@            Coverage Diff             @@
##           master     #158      +/-   ##
==========================================
- Coverage   43.74%   43.38%   -0.37%     
==========================================
  Files          50       50              
  Lines        5301     5352      +51     
==========================================
+ Hits         2319     2322       +3     
- Misses       2588     2634      +46     
- Partials      394      396       +2     

Flag	Coverage Δ
unittests	43.38% <0.00%> (-0.37%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
pkg/controller/rollout/rollout_controller.go	10.95% <0.00%> (-0.31%)	⬇️
pkg/controller/rollout/rollout_status.go	20.96% <0.00%> (-3.57%)	⬇️

... and 5 files with indirect coverage changes

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[furykerry]

can we move this code block to a separate func ? e.g. updateRolloutWorkload, since it has nothing to do with the rollout object. updateRolloutWorkload can be placed before handleFinalizer

[sonatype-lift]

goimports: File is not goimports-ed

---

ℹ️ Expand to see all @sonatype-lift commands

You can reply with the following commands. For example, reply with @sonatype-lift ignoreall to leave out all findings.

Command	Usage
@sonatype-lift ignore	Leave out the above finding from this PR
@sonatype-lift ignoreall	Leave out all the existing findings from this PR
@sonatype-lift exclude <file|issue|path|tool>	Exclude specified file|issue|path|tool from Lift findings by updating your config.toml file

Note: When talking to LiftBot, you need to refresh the page to see its response.
_{Click here to add LiftBot to another repo.}

[furykerry]

/lgtm

[zmberg]

/approve

[kruise-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: zmberg

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [zmberg]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment