Configure Compliance Operator for ROSA HCP

As mentioned in the Compliance Operator documentation, when installed on
ROSA hosted control planes, a special node selector must be configured
for the operator to run. This update uses conditionals to only make this
configuration only on those clusters.

Refs:
 - https://issues.redhat.com/browse/ACM-14161

Signed-off-by: Justin Kulikauskas <[email protected]>

Author: JustinKuli

stable/CA-Security-Assessment-and-Authorization/policy-compliance-operator-install.yaml

@@ -51,3 +51,9 @@ spec:
             namespace: openshift-compliance
             source: redhat-operators
             sourceNamespace: openshift-marketplace
+            # Conditionally configure a nodeSelector for installing on ROSA hosted control planes
+            config: '{{ if and (eq "ROSA" (fromClusterClaim
+              "product.open-cluster-management.io")) (eq "true"
+              (fromClusterClaim "hostedcluster.hypershift.openshift.io"))
+              }}{"nodeSelector":{"node-role.kubernetes.io/worker":""} }{{ else
+              }}{{ "{}" | toLiteral }}{{ end }}'