Add a validating webhook

[qbarrand]

Some complex constraints cannot be expressed through kubebuilder / OpenAPI annotations.
To avoid errors at runtime, non-trivial validations are typically implemented in a Validating Admission Webhook. We should implement such a webhook to detect malformed Modules as early as possible.

Checks:

• all regexes in the Module are valid
• all kernel mappings should have a non-empty containerImage field, unless .spec.moduleLoader.container.containerImage is defined
• .spec.moduleLoader.container.modprobe.moduleName is not empty unless both modprobe.rawArgs.load and modprobe.rawArgs.unload are defined

[yevgeny-shnaidman]

in case RawArgs are set, webhook must make sure that -a option is not set ( -a option is not support by KMM)

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues and PRs.

This bot triages issues and PRs according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue or PR as fresh with /remove-lifecycle stale
• Mark this issue or PR as rotten with /lifecycle rotten
• Close this issue or PR with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale

[qbarrand]

/remove-lifecycle stale

[qbarrand]

Merged in #348 #368 #383 #388