Container can't run as root by default in ICP v3.1.1.

[sotoiwa]

Openldap container try to run as root but container can't run as root by default in ICP v3.1.1.

To allow container run as root, we need to create PodSecurityPolicy, ClusterRole and ClusterRoleBinding.
We can use PodSecurityPolicy and ClusterRole created by ICP.
In that case we need to create only ClusterRoleBinding something like below.

kubectl create clusterrolebinding ibm-privileged-openldap \
  --clusterrole=ibm-privileged-clusterrole \
  --serviceaccount=<namespace>:default