Run test pods with readOnlyRootFileSystem: true

[lpiwowar]

Up until now the test pods were being spawned with writable root
file system (readOnlyRootFilesystem: false). This is against the
best security practices as setting the readOnlyRootFileSystem to
false increases the size of the attack surface.

This patch ensures that each pod spawned by the test-operator has
the readOnlyRootFilesystem set to true by default. It is possible
to run a pod with writable roo file system by setting
privileged: true.

Depends-On: openstack-k8s-operators/tcib#233

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[softwarefactory-project-zuul]

Merge Failed.

This change or one of its cross-repo dependencies was unable to be automatically merged with the current state of its repository. Please rebase the change and upload a new patchset.
Warning:
Error merging github.com/openstack-k8s-operators/tcib for 233,83d79be1074c83e028fb426f749af732f3684fb2

[lpiwowar]

recheck

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/b80284a9580e4e9da36a39b26e15515e

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 38m 32s
❌ podified-multinode-edpm-deployment-crc-test-operator TIMED_OUT in 3h 12m 07s

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/cf6b24dd75da42609e6384cda6085b97

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 26m 48s
❌ podified-multinode-edpm-deployment-crc-test-operator TIMED_OUT in 3h 11m 23s

[lpiwowar]

/test all

[lpiwowar]

recheck

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/785b677ae6284477827d3665f605b0f9

✔️ openstack-k8s-operators-content-provider SUCCESS in 1h 53m 42s
❌ podified-multinode-edpm-deployment-crc-test-operator FAILURE in 1h 43m 46s

[lpiwowar]

recheck

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/456573d5794742f593cac02cb634c405

✔️ openstack-k8s-operators-content-provider SUCCESS in 1h 57m 02s
❌ podified-multinode-edpm-deployment-crc-test-operator FAILURE in 1h 43m 00s

[lpiwowar]

/test test-operator-build-deploy

[softwarefactory-project-zuul]

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/751a5477abbb4697aac1ef6ed4d16970

✔️ openstack-k8s-operators-content-provider SUCCESS in 3h 20m 59s
❌ podified-multinode-edpm-deployment-crc-test-operator TIMED_OUT in 3h 10m 59s

[lpiwowar]

The promotion for the podified-antelope-centos9 did not pass yesterday (tcib image does not contain the fix yet):

• https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/a7e6aed5aea04e80b3c36d5a39b31db1

-> We have to wait.

[lpiwowar]

/test test-operator-build-deploy

[lpiwowar]

recheck

promotion finally passed

[kopecmartin]

lgtm, thanks Lukas

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kopecmartin, lpiwowar

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [kopecmartin,lpiwowar]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment