add job ks-upgrade to upgrade role

Signed-off-by: Wenhao Zhou <wenhaozhou@yunify.com>

roles/ks-core/ks-core/tasks/main.yaml

@@ -139,11 +139,16 @@
   # register: source_state
   # failed_when: "source_state.stderr and 'already exists' not in source_state.stderr"
 
-- name: KubeSphere | Upgrade GlobalRolebindings
+- name: Kubesphere | Checking Users Manger and Workspaces Manger
+    shell:
+      {{ bin_dir }}/kubectl get globalroles.iam.kubesphere.io users-manager workspaces-manager --no-header | wc -l
+    register: manager_result
+
+- name: KubeSphere | Creating migration job
   shell: >
-    {{ bin_dir }}/kubectl get globalrolebindings -o jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.roleRef.name}{"\n"}' 
-    | grep -e "users-manager$" -e "workspaces-manager$" | awk '{print $1}' 
-    | xargs -i {{ bin_dir }}/kubectl patch globalrolebindings {} --type merge -p '{"roleRef":{"name":"platform-regular"}}'
+    {{ bin_dir }}/kubectl apply -f {{ kubesphere_dir }}/ks-upgrade.yaml
+  when:
+    - manager_result.stdout != "0"
 
 - name: KubeSphere | Importing ks-core status
   shell: >

roles/ks-core/ks-core/templates/ks-upgrade.yaml.j2

@@ -0,0 +1,22 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: ks-upgrade
+  namespace: kubesphere-system
+  labels:
+    job: ks-upgrade
+    version: v3.0.0
+spec:
+  template:
+    spec:
+      serviceAccountName: ks-installer
+      restartPolicy: OnFailure
+      containers:
+        - command:
+            - ks-upgrade
+            - --logtostderr
+            - --v=4
+          image: {{ ks_update_repo }}:{{ ks_update_tag }}
+          imagePullPolicy: IfNotPresent
+          name: ks-upgrade