Update SCC and Network Attachment

openshift/openshiftstack/application/istio-1-14-OpenShift/network-attachment.yaml

@@ -0,0 +1,5 @@
+apiVersion: "k8s.cni.cncf.io/v1"
+kind: NetworkAttachmentDefinition
+namespace: kubeflow
+metadata:
+  name: istio-cni

openshift/openshiftstack/application/notebook-controller/base/configs/network_attachment.yaml

@@ -0,0 +1,5 @@
+apiVersion: "k8s.cni.cncf.io/v1"
+kind: NetworkAttachmentDefinition
+namespace: kubeflow-user-example-com
+metadata:
+  name: istio-cni

openshift/openshiftstack/application/openshift/openshift-scc/base/kubeflow-anyuid-scc.yaml

@@ -4,7 +4,7 @@ metadata:
   annotations:
     kubernetes.io/description: kubeflow-anyuid provides all features of the restricted SCC
       but allows users to run with any UID and any GID.
-  name: kubeflow-anyuid-$(NAMESPACE)
+  name: kubeflow-anyuid-kubeflow
 allowHostDirVolumePlugin: false
 allowHostIPC: false
 allowHostNetwork: false
@@ -46,6 +46,7 @@ users:
 - system:serviceaccount:$(NAMESPACE):pipeline-runner
 # Allowing all serviceaccounts in kubeflow to run any uid per istio 1.9 documentation for openshift https://istio.io/latest/docs/setup/platform-setup/openshift/
 - system:serviceaccounts:$(NAMESPACE)
+-  system:serviceaccount:kubeflow-user-example-com:default-editor
 volumes:
 - configMap
 - downwardAPI

openshift/openshiftstack/kustomization.yaml

@@ -5,6 +5,9 @@ resources:
 #Kubeflow roles
   - ../../common/kubeflow-roles/base
 
+# This is here because it needs to install in namespace kubeflow
+  - application/istio-1-14-OpenShift/network-attachment.yaml
+
 #Added custom centraldashboard to remove tensorboard
   - application/centraldashboard/base
 
@@ -24,6 +27,9 @@ resources:
 #Create defualt user
   - ../../common/user-namespace/base
 
+# Create network-attachment for default user namespace
+- application/notebook-controller/base/configs/network_attachment.yaml
+
 configMapGenerator:
 - name: kubeflow-config
   envs: