fix(workflows): add clusterpolicy to validate workflow type

Author: iamvigneshwars

charts/workflows/templates/workloadpriority-clusterpolicy.yaml

@@ -74,3 +74,23 @@ spec:
               labels:
                 kueue.x-k8s.io/queue-name: default-queue
                 kueue.x-k8s.io/priority-class: low
+
+    - name: validate-workflow-type
+      match:
+        any:
+        - resources:
+            kinds:
+            - argoproj.io/*/Workflow
+            operations:
+            - CREATE
+      validate:
+        message: "The annotation workflows.diamond.ac.uk/type must be 'standard', 'live', or 'test'."
+        deny:
+          conditions:
+            all:
+            - key: "{{ `{{ request.object.metadata.annotations.\"workflows.diamond.ac.uk/type\" || 'standard' }}` }}"
+              operator: AnyNotIn
+              value:
+              - standard
+              - live
+              - test

charts/workflows/test-policy/workloadpriorityclass/chainsaw-test.yaml

@@ -83,3 +83,12 @@ spec:
                   labels:
                     kueue.x-k8s.io/queue-name: default-queue
                     kueue.x-k8s.io/priority-class: low
+        - error:
+            resource:
+              apiVersion: argoproj.io/v1alpha1
+              kind: Workflow
+              metadata:
+                name: invalid
+                annotations:
+                  workflows.diamond.ac.uk/type: "processing"
+              spec: {}