feat: add psp selinux models

examples/mutation/pod-security-policy/selinux/kcl.mod

@@ -0,0 +1,5 @@
+[package]
+name = "selinux"
+edition = "0.0.1"
+version = "0.0.1"
+

examples/mutation/pod-security-policy/selinux/main.k

@@ -0,0 +1,13 @@
+schema Params:
+    level?: str = "s1:c234,c567"
+    user?: str = "sysadm_u"
+    role?: str = "sysadm_r"
+    $type: str = "svirt_lxc_net_t"
+
+params: Params = option("params")
+items = [item | {
+    if item.kind == "Pod":
+        spec.containers: [{
+            securityContext.seLinuxOptions = params
+        } for container in item.spec.containers]
+} for item in option("items") or []]

examples/mutation/pod-security-policy/selinux/suite/good.yaml

@@ -0,0 +1,22 @@
+apiVersion: krm.kcl.dev/v1alpha1
+kind: KCLRun
+metadata:
+  name: selinux
+  annotations: 
+    krm.kcl.dev/version: 0.0.1
+    krm.kcl.dev/type: mutation
+    documentation: >-
+      Pod Secirity Policy (PSP) selinux
+spec:
+  source: ./examples/mutation/pod-security-policy/selinux/main.k
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: nginx-default-selinux
+  labels:
+    app: nginx-default-selinux
+spec:
+  containers:
+  - name: nginx
+    image: nginx