add flag to disable openshiftv3 / enable vanilla kubernetes support

chart/templates/cronjob.yaml

 {{- if (and .Values.backend.shibboleth.sessionCache.enabled .Values.backend.shibboleth.sessionCache.sealerKeys.manage) }}
 ---
+{{- if .Values.openshiftv3 }}
 apiVersion: batch/v1beta1
+{{- else }}
+apiVersion: batch/v1
+{{- end }}
 kind: CronJob
 metadata:
   name: {{ include "shibboleth-sp.fullname" . }}-rotate-sealer-keys

chart/templates/rolebinding.yaml

 {{- if (and .Values.backend.shibboleth.sessionCache.enabled .Values.backend.shibboleth.sessionCache.sealerKeys.serviceAccount.create) }}
 ---
+{{- if .Values.openshiftv3 }}
 apiVersion: authorization.openshift.io/v1
+{{- else }}
+apiVersion: rbac.authorization.k8s.io/v1
+{{- end }}
 kind: RoleBinding
 metadata:
   name: {{ include "shibboleth-sp.sealerKeys.serviceAccountName" . }}
@@ -16,5 +20,11 @@ subjects:
   - kind: ServiceAccount
     name: {{ include "shibboleth-sp.sealerKeys.serviceAccountName" . }}
 roleRef:
+{{- if .Values.openshiftv3 }}
   name: edit
+{{- else }}
+  kind: Role
+  name: namespace-editor
+  apiGroup: rbac.authorization.k8s.io
+{{- end }}
 {{- end -}}

chart/values.yaml

@@ -14,6 +14,10 @@ global:
 ##############
 ### common ###
 ##############
+
+# temporary flag to support legacy openshiftv3 and modern vanilla kubernetes
+openshiftv3: true
+
 nameOverride: ""
 fullnameOverride: ""