Create a service account for ceph-pools-audit cron job

A service account for ceph-pools-audit cron job should be
created to provide identity.
The commit updates the ceph pools audit chart to leverage
helm-toolkit to create its service account which also
provides the image credentials.

Change-Id: I2da135047ee9fa47274c49a989d6b905104f3ffd
Closes-Bug: 1819720
Signed-off-by: Angie Wang <angie.wang@windriver.com>

stx-platform-helm/stx-platform-helm/helm-charts/ceph-pools-audit/templates/job-ceph-pools-audit.yaml

@@ -8,6 +8,9 @@
 
 {{- if .Values.manifests.job_ceph_pools_audit }}
 {{- $envAll := . }}
+
+{{- $serviceAccountName := "ceph-pools-audit" }}
+{{ tuple $envAll "job_ceph_pools_audit" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }}
 ---
 #
 # The CronJob makes sure all the Ceph pools have the right replication,
@@ -40,6 +43,7 @@ spec:
           labels:
             app: ceph-pools-audit
         spec:
+          serviceAccountName: {{ $serviceAccountName }}
           restartPolicy: OnFailure
           nodeSelector:
             {{ .Values.labels.job.node_selector_key }}: {{ .Values.labels.job.node_selector_value }}

stx-platform-helm/stx-platform-helm/helm-charts/ceph-pools-audit/values.yaml

@@ -28,6 +28,21 @@ images:
   tags:
     ceph_config_helper: docker.io/port/ceph-config-helper:v1.10.3
   pullPolicy: "IfNotPresent"
+  local_registry:
+    active: false
+    exclude:
+      - dep_check
+      - image_repo_sync
+
+dependencies:
+  dynamic:
+    common:
+      local_image_registry:
+        jobs:
+          - image-repo-sync
+        services:
+          - endpoint: node
+            service: local_image_registry
 
 jobs:
   job_ceph_pools_audit: