Automatically manage the container-build SCC if containerBuildCapabilities are enabled

[l0rd]

Is your enhancement related to a problem? Please describe

As mentioned in this blog post, to allow container build capabilities in workspaces admins and users have to go through some extra steps. Those steps are manual, not documented, and error prone.

Describe the solution you'd like

Che should

• Allow che administrators to enable container build capabilities for developers workspaces #21752
• Automatically create the container build SCC if containerBuildCapability is enabled #21768
• Automatically add the container build SCC to users if containerBuildCapability is enabled #21769
• Specify the workspace Pods securityContext (SETGID and SETUID) when developers have container build capabilities #21770
• Dashboard should inject controller.devfile.io/scc: container-build based on the CR property #21756

Once those are completed we should change the default of disableContainerBuildCapabilities to false (today the default is true:

spec:
  devEnvironments:
    disableContainerBuildCapabilities: false # initially the default is `true`
    containerBuildConfiguration:
       openShiftSecurityContextConstraint: 'container-build'
       containerOverrides: {"securityContext":{"capabilities":{"add": ["SETGID", "SETUID"]}}}
       podOverrides: {"spec": {"securityContext": {"allowPrivilegeEscalation": false}}}

[l0rd]

@ibuziuk @tolusha @AObuchow I have update the sprint plan and added

• Automatically create the container build SCC if containerBuildCapability is enabled #21768 and Automatically add the container build SCC to users if containerBuildCapability is enabled #21769 in the operator section
• Specify the workspace Pods securityContext (SETGID and SETUID) when developers have container build capabilities #21770 to the devworkspace section

The changes are also reflected in the summary of the [related Dev Spaces Jira]](https://issues.redhat.com/browse/CRW-3366.

[tolusha]

@l0rd
Can we close this one?

[l0rd]

@tolusha yes