Add OpenShift support to boundary-worker Helm chart

[Rkabra7]

Summary

Adds values.openshift.yaml with ready-to-use OpenShift overrides.
Adds an OpenShift Route template to provide TCP passthrough access to the worker proxy port.
Switches the proxy Service to ClusterIP when OpenShift support is enabled, with the Route handling external traffic.
Applies an OpenShift-compatible security context by removing fixed UID/GID settings so SCC can assign values from the namespace range.
Makes PVC storageClass conditional, allowing the cluster default storage class to be used when left unset.
Adds a new openshift: configuration section to values.yaml (disabled by default).
Adds unit tests covering all new OpenShift-specific paths.

##Testing

Tested on OpenShift Local (CRC). The worker successfully authenticated to a self-managed Boundary controller using the OpenShift-specific chart configuration.

Related

• Issue:
• Chart/Component:

Checklist

• I have documented a clear reason for, and description of, the change I am making.

• Added/updated tests or validation steps (if applicable)

• Verified local lint/validation

• No breaking changes, or clearly documented

• If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

• If applicable, I've documented the impact of any changes to security controls.

  Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

[github-actions]

Reliability Check(s) Results

Target Asset: boundary-worker-helm
Checks Executed: cv-present,github-secret-scanning-enabled,metad-has-deploy-yaml-file,metad-owner-check,github-secret-push-protection-enabled,github-code-owners-errors,github-default-branch-protection-rule,ops-review-active,github-code-owners,github-dependabot-alerts-enabled,github-actions-sre-reliability-checker-present,github-code-scanning-status,metad-has-tags-yaml-file,github-dependabot-version-updates-enabled,tool-use-roam-gha,github-code-owners-default-owner,github-dependabot-security-updates-enabled,github-secrets-management

⚠️ One or more non-blocking checks failed

Failed Check Details:

Note

Click on the check hyperlink for details on how to fix the failed checks.

• Check cv-present (documentation) is failing

• Check metad-has-deploy-yaml-file (documentation) is failing

• Check metad-owner-check (documentation) is failing

• Check github-default-branch-protection-rule (documentation) is failing

• Check ops-review-active (documentation) is failing

• Check github-actions-sre-reliability-checker-present (documentation) is failing

• Check github-code-scanning-status (documentation) is failing

• Check metad-has-tags-yaml-file (documentation) is failing

• Check github-dependabot-security-updates-enabled (documentation) is failing

• Check github-secrets-management (documentation) is failing