api: add SecurityContextConstraints to nvmeof ServiceAccounts

The NVMe-oF ServiceAccounts need an SCC so that they can be used on
OpenShift.

Signed-off-by: Niels de Vos <ndevos@ibm.com>

Author: nixpanic

api/deploy/ocp/scc.yaml

@@ -45,3 +45,6 @@ users:
   - "system:serviceaccount:{{ .Namespace }}:{{ .Prefix }}csi-cephfs-provisioner-sa"
   - "system:serviceaccount:{{ .Namespace }}:{{ .Prefix }}csi-nfs-plugin-sa"
   - "system:serviceaccount:{{ .Namespace }}:{{ .Prefix }}csi-nfs-provisioner-sa"
+  - "system:serviceaccount:{{ .Namespace }}:{{ .Prefix }}csi-nvmeof-plugin-sa"
+  # yamllint disable-line rule:line-length
+  - "system:serviceaccount:{{ .Namespace }}:{{ .Prefix }}csi-nvmeof-provisioner-sa"

deploy/scc.yaml

@@ -52,3 +52,6 @@ users:
   - "system:serviceaccount:ceph-csi:csi-cephfs-provisioner-sa"
   - "system:serviceaccount:ceph-csi:csi-nfs-plugin-sa"
   - "system:serviceaccount:ceph-csi:csi-nfs-provisioner-sa"
+  - "system:serviceaccount:ceph-csi:csi-nvmeof-plugin-sa"
+  # yamllint disable-line rule:line-length
+  - "system:serviceaccount:ceph-csi:csi-nvmeof-provisioner-sa"