feat: add Openshift anyuid SCC role binding (#160)

config/default/kustomization.yaml

@@ -5,6 +5,7 @@ resources:
   - ../image-scanner-jobs
   - ../operator
   - ../trivy-server
+  - scc_anyuid_role_binding.yaml
 replacements:
   # This replacement ensures that we run the same trivy image in client and server (obtained from server)
   - source:

config/default/scc_anyuid_role_binding.yaml

@@ -0,0 +1,16 @@
+---
+# This role binding is required on Openshift installs.
+# Consider dedicated base - even if this does not harm on other K8s distros.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: scc-anyuid
+  namespace: image-scanner-jobs
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:openshift:scc:anyuid
+subjects:
+  - kind: ServiceAccount
+    name: image-scanner
+    namespace: image-scanner-jobs