Admission Webhook Path to GA KEP

[mbohlool]

Enhancement proposal to promote Admission Webhooks to GA.

@deads2k @liggitt @sttts @erictune @caesarxuchao @roycaihw @fedebongio @lavalamp

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: mbohlool
To fully approve this pull request, please assign additional approvers.
We suggest the following additional approver: lavalamp

If they are not already assigned, you can assign the PR to them by writing /assign @lavalamp in a comment when ready.

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• contributors/design-proposals/api-machinery/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[mbohlool]

/sig api-machinery

[cblecker]

/hold

I think this is supposed to be a kep in k/enhancements.

/cc @kubernetes/kep-maintainers

[justaugustus]

Yes, this needs to be migrated over to k/enhancements.

[deads2k]

I think that any plan to graduate to GA needs to address the existent problems that have been identified around admission plugin ordering. Notably kubernetes/kubernetes#64333 which prevents mutating admission plugins from manipulating pods.

/hold

[mbohlool]

closing in favor of kubernetes/enhancements#736

(have not addressed any comments on this document yet, will do).