Get the OpenShift Pod running as rootless

[adelton]

Tests show that

--- a/kind-cluster-pod-openshift.yaml
+++ b/kind-cluster-pod-openshift.yaml
@@ -15,14 +15,21 @@ metadata:
   name: kind-cluster
   labels:
     app: kind-cluster
+  annotations:
+    io.openshift.builder: "true"
+    io.kubernetes.cri-o.userns-mode: auto
 spec:
+  securityContext:
+    runAsUser: 200000
+    fsGroup: 200000
+    fsGroupChangePolicy: OnRootMismatch
   initContainers:

should enable the Pod to run in a user namespace, making uid 0 in the containers uid 200000 on the OpenShift worker hosts.

However, the whole setup fails because kind runs systemd in the podman containers and we hit containers/podman#21008.

Filing this issue as a placeholder to continue the investigation of rootless kind in OpenShift once we know how systemd in rootless podman in OpenShift should be run.

[adelton]

The issue is currently most likely in CRI-O: cri-o/cri-o#7623.