Support server-side dry run
Support server-side dry run

Cherry-pick from HNC v0.5 - commit ce983662. Tested: many e2e tests are
currently broken on master (#1058) but roughly the same ones fail before
and after (there appears to be a bit of flakiness) and I very much doubt
any of the failures are caused by this change.

Original commit message follows.

---

See issue #1027. To support server-side dry-run, all admission webhooks
must state that they do not have any side effects. Our version of
controller-gen doesn't include the sideEffects marker so I added them as
a kustomization patch.

Tested: server-side dry-run fails on a pod creation in Kind 1.18 without
this fix and passes with it. GKE doesn't have 1.18 yet so I couldn't
test it there, but I also tested it on GKE 1.15 (the oldest currently
supported version) to ensure that it had no ill effects, and all e2e
tests work fine on both Kind 1.18 and GKE 1.15.

kubernetes-sigs/multi-tenancy,kubernetes-sigs/multi-tenancy