Add Service Accounts of "olm" namespace into the privileged SCC

This fix ensures that OLM pods can be deployed into the "olm" namespace
because some pods require to run with specific Security Requirements not
allowed by the default "restricted" SCC.

tasks/olm.yaml

@@ -21,13 +21,18 @@
   failed_when: olm_status.rc not in [0, 1]
   changed_when: true
 
-- name: Install OLM with SDK
+# Set ns/user to SCC before we run the OLM installation
+- name: Ensure privileged SCC for OLM
   ansible.builtin.command:
-    "{{ repo_dir }}/operator-sdk olm install --version {{ olm_version }}"
-  when: olm_status.rc != 0
+    oc adm policy add-scc-to-user privileged system:serviceaccount:olm:{{ item }}
   changed_when: true
+  loop:
+    - "default"
+    - "operatorhubio-catalog"
+    - "olm-operator-serviceaccount"
 
-- name: Ensure privileged SCC for OLM
+- name: Install OLM with SDK
   ansible.builtin.command:
-    oc adm policy add-scc-to-user privileged system:serviceaccount:olm:default
+    "{{ repo_dir }}/operator-sdk olm install --version {{ olm_version }}"
+  when: olm_status.rc != 0
   changed_when: true