move service-ca volumes to cm,secret

[sallyom]

Instead of hostPath volumes, create the configmap and secret to use configmap,secret volume type in service-ca deployment. This will allow service-ca pod to run as non-root, once the cluster-policy-controller is running in MicroShift.

[openshift-ci]

@sallyom: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-reboot	d9dcf58	link	false	/test e2e-reboot
ci/prow/e2e-openshift-conformance-sig-arch	d9dcf58	link	false	/test e2e-openshift-conformance-sig-arch
ci/prow/e2e-openshift-conformance-sig-apps	d9dcf58	link	false	/test e2e-openshift-conformance-sig-apps
ci/prow/e2e-rpm-install	d9dcf58	link	false	/test e2e-rpm-install
ci/prow/e2e-openshift-conformance-sig-network	d9dcf58	link	false	/test e2e-openshift-conformance-sig-network
ci/prow/e2e-openshift-conformance-sig-cli	d9dcf58	link	false	/test e2e-openshift-conformance-sig-cli
ci/prow/e2e-openshift-conformance-sig-api-machinery	d9dcf58	link	false	/test e2e-openshift-conformance-sig-api-machinery
ci/prow/e2e-openshift-conformance-sig-storage	d9dcf58	link	false	/test e2e-openshift-conformance-sig-storage
ci/prow/e2e-openshift-conformance-sig-node	d9dcf58	link	false	/test e2e-openshift-conformance-sig-node
ci/prow/e2e-openshift-conformance-sig-scheduling	d9dcf58	link	false	/test e2e-openshift-conformance-sig-scheduling
ci/prow/e2e-openshift-conformance-sig-instrumentation	d9dcf58	link	false	/test e2e-openshift-conformance-sig-instrumentation
ci/prow/e2e-openshift-conformance-sig-auth	d9dcf58	link	false	/test e2e-openshift-conformance-sig-auth

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[mangelajo]

/LGTM

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: mangelajo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [mangelajo]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment