add openshift-specific rbac

Author: xeniape

…kuttl/smoke_v2/50-install-test-nifi.yaml …tl/smoke_v2/50-install-test-nifi.yaml.j2tests/templates/kuttl/smoke_v2/50-install-test-nifi.yaml renamed to tests/templates/kuttl/smoke_v2/50-install-test-nifi.yaml.j2 tests/templates/kuttl/smoke_v2/50-install-test-nifi.yaml renamed to tests/templates/kuttl/smoke_v2/50-install-test-nifi.yaml.j2

@@ -15,6 +15,7 @@ spec:
       labels:
         app: test-nifi
     spec:
+      serviceAccountName: "tls-sa"
       securityContext:
         fsGroup: 1000
       containers:
@@ -46,3 +47,32 @@ spec:
                 resources:
                   requests:
                     storage: "1"
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: tls-sa
+{% if test_scenario['values']['openshift'] == 'true' %}
+---
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: use-integration-tests-scc
+rules:
+- apiGroups: ["security.openshift.io"]
+  resources: ["securitycontextconstraints"]
+  resourceNames: ["privileged"]
+  verbs: ["use"]
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: use-integration-tests-scc
+subjects:
+  - kind: ServiceAccount
+    name: tls-sa
+roleRef:
+  kind: Role
+  name: use-integration-tests-scc
+  apiGroup: rbac.authorization.k8s.io
+{% endif %}