Support mounting volumes into functions

[pwittrock]

Context: kustomize config run

Functions should be able to request access to the network in the Resource metadata.

e.g.

apiVersion: v1beta1
kind: Foo
metadata:
  name: foo
  configFn:
    container:
      image: gcr.io/kustomize-functions/example-tshirt:v0.1.0
      volumes:
      - src: path-to-src
         dest: path-to-dest

• if a function specifies configFn.container.volumes the local volumes should be mounted into the functions contain
• volumes must be in a directory under the config directory (no ../)
• volumes are relative to the Resource config

Files to change

• kyaml/runfn/runfn.go:
  • In init -- have the containerFilterProvider function check if the container requires volumes
  • Validate the volumes are not above the function config resource
  • Use the path annotation on the function Resource to get its location
  • Mount volumes relative to the Resource

[bzub]

Does this replace #1839 ?

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle stale

[prachirp]

/assign @prachirp

[fejta-bot]

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

Send feedback to sig-testing, kubernetes/test-infra and/or fejta.
/lifecycle rotten