K8SPS-110 certify openshift

[nmarukovich]

CHANGE DESCRIPTION

Problem:
We can't run ps operator on openshift because of permission restrictions.

Cause:
Short explanation of the root cause of the issue if applicable.

Solution:
Use empty volume to store orchestrator config and run mysqlsh.
CHECKLIST

Jira

• Is the Jira ticket created and referenced properly?
• Does the Jira ticket have the proper statuses for documentation (Needs Doc) and QA (Needs QA)?
• Does the Jira ticket link to the proper milestone (Fix Version field)?

Tests

• Is an E2E test/test case added for the new feature/change?
• Are unit tests added where appropriate?

Config/Logging/Testability

• Are all needed new/changed options added to default YAML files?
• Are all needed new/changed options added to the Helm Chart?
• Did we add proper logging messages for operator actions?
• Did we ensure compatibility with the previous version or cluster upgrade process?
• Does the change support oldest and newest supported PS version?
• Does the change support oldest and newest supported Kubernetes version?

[github-actions]

[shfmt] _{reported by reviewdog 🐶}

Suggested change

	platform=openshift
	oc create sa pmm-server -n "${NAMESPACE}" || :
	oc adm policy add-scc-to-user privileged -z pmm-server -n "${NAMESPACE}" || :
	if [[ $OPERATOR_NS ]]; then
	timeout 30 oc delete clusterrolebinding $(kubectl get clusterrolebinding | grep 'pmm-ps-operator-' | awk '{print $1}') || :
	oc create clusterrolebinding pmm-ps-operator-cluster-wide --clusterrole=percona-server-mysql-operator --serviceaccount=$NAMESPACE:pmm-server -n "$NAMESPACE"
	oc patch clusterrole/percona-server-mysql-operator --type json -p='[{"op":"add","path": "/rules/-","value":{"apiGroups":["security.openshift.io"],"resources":["securitycontextconstraints"],"verbs":["use"],"resourceNames":["privileged"]}}]' ${OPERATOR_NS:+-n $OPERATOR_NS} || :
	else
	oc create rolebinding pmm-ps-operator-namespace-only --role percona-server-mysql-operator --serviceaccount=$NAMESPACE:pmm-server -n "$NAMESPACE"
	oc patch role/percona-server-mysql-operator --type json -p='[{"op":"add","path": "/rules/-","value":{"apiGroups":["security.openshift.io"],"resources":["securitycontextconstraints"],"verbs":["use"],"resourceNames":["privileged"]}}]' -n "$NAMESPACE" || :
	fi
	local additional_params="--set platform=openshift --set supresshttp2=false --set serviceAccount.create=false --set serviceAccount.name=pmm-server"
	fi
	retry 10 120 helm install monitoring percona/pmm -n "${NAMESPACE}" \
	--set fullnameOverride=monitoring \
	--version ${PMM_SERVER_VERSION} \
	--set imageTag=${IMAGE_PMM_SERVER#*:} \
	--set imageRepo=${IMAGE_PMM_SERVER%:*} \
	--set service.type=LoadBalancer \
	$additional_params \
	--force
	platform=openshift
	oc create sa pmm-server -n "${NAMESPACE}" || :
	oc adm policy add-scc-to-user privileged -z pmm-server -n "${NAMESPACE}" || :
	if [[ $OPERATOR_NS ]]; then
	timeout 30 oc delete clusterrolebinding $(kubectl get clusterrolebinding | grep 'pmm-ps-operator-' | awk '{print $1}') || :
	oc create clusterrolebinding pmm-ps-operator-cluster-wide --clusterrole=percona-server-mysql-operator --serviceaccount=$NAMESPACE:pmm-server -n "$NAMESPACE"
	oc patch clusterrole/percona-server-mysql-operator --type json -p='[{"op":"add","path": "/rules/-","value":{"apiGroups":["security.openshift.io"],"resources":["securitycontextconstraints"],"verbs":["use"],"resourceNames":["privileged"]}}]' ${OPERATOR_NS:+-n $OPERATOR_NS} || :
	else
	oc create rolebinding pmm-ps-operator-namespace-only --role percona-server-mysql-operator --serviceaccount=$NAMESPACE:pmm-server -n "$NAMESPACE"
	oc patch role/percona-server-mysql-operator --type json -p='[{"op":"add","path": "/rules/-","value":{"apiGroups":["security.openshift.io"],"resources":["securitycontextconstraints"],"verbs":["use"],"resourceNames":["privileged"]}}]' -n "$NAMESPACE" || :
	fi
	local additional_params="--set platform=openshift --set supresshttp2=false --set serviceAccount.create=false --set serviceAccount.name=pmm-server"
	fi
	retry 10 120 helm install monitoring percona/pmm -n "${NAMESPACE}" \
	--set fullnameOverride=monitoring \
	--version ${PMM_SERVER_VERSION} \
	--set imageTag=${IMAGE_PMM_SERVER#*:} \
	--set imageRepo=${IMAGE_PMM_SERVER%:*} \
	--set service.type=LoadBalancer \
	$additional_params \
	--force

[github-actions]

[shfmt] _{reported by reviewdog 🐶}

Suggested change

	count=$(echo "$count" | awk '{if ($1 ~ /^[0-9]+$/) print $1; else print 0}')
	count=$(echo "$count" | awk '{if ($1 ~ /^[0-9]+$/) print $1; else print 0}')

[github-actions]

[shfmt] _{reported by reviewdog 🐶}

Suggested change

	oc adm policy add-scc-to-user privileged -z chaos-daemon --namespace=${NAMESPACE}
	fi
	sleep 10
	oc adm policy add-scc-to-user privileged -z chaos-daemon --namespace=${NAMESPACE}
	fi
	sleep 10