Determine namespaceability of resources from openapi schema

[mortent]

This uses the openapi schema to determine whether a resource is namespace-scoped or cluster-scoped as described here.
Since up until now the openapi schema that was included in kpt was not complete, but only included type definitions, I had to update the openapi schema. It is still based on kubernetes version 1.17.
This only makes the logic available in kyaml, it does not update kustomize to use it.

Ref: #2861

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mortent

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [mortent]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[apelisse]

I think that's good. I don't know what is the best way to detect it from there looking for parameter vs string pattern. You could build a test that walks through all of them and compares?

[apelisse]

Yeah, you have two options:

1. Look for that specific pattern in the path, or
2. A path parameter like this:

"in": "path",
"name": "namespace",
"required": true,
"type": "string",

3. Or both.

[mortent]

Yeah, I think both approaches should work equally well. The only tricky part is that even namespaced resources will have some paths that doesn't include the namespace path parameter (like /apis/apps/v1/deployments). But the code does account for this.

[apelisse]

Right, that's fine! If you feel confident that this is good enough, go for it!
/lgtm