Remove outdate profiles component

openshift/example/istio/kustomization.yaml

@@ -5,6 +5,7 @@ resources:
   - ../../openshiftstack/application/openshift/openshift-scc/overlays/istio
   - ../../openshiftstack/application/istio-1-1-1-Openshift
   - ../../openshiftstack/application/cert-manager-1.5
+  - ../../openshiftstack/application/profiles-resources/base
   - ../../openshiftstack/application/kfp-tekton/base
   - ../../openshiftstack/application/knative/overlays/istio
   - ../../openshiftstack/application/jupyter-web-app/base

openshift/openshiftstack/application/openshift/openshift-scc/base/kubeflow-anyuid-scc.yaml

@@ -46,7 +46,7 @@ users:
 - system:serviceaccount:$(NAMESPACE):pipeline-runner
 # Allowing all serviceaccounts in kubeflow to run any uid per istio 1.9 documentation for openshift https://istio.io/latest/docs/setup/platform-setup/openshift/
 - system:serviceaccounts:$(NAMESPACE)
--  system:serviceaccount:kubeflow-user-example-com:default-editor
+- system:serviceaccount:kubeflow-user-example-com:default-editor
 volumes:
 - configMap
 - downwardAPI

openshift/openshiftstack/application/profiles-resources/base/authorization_policy.yaml

@@ -0,0 +1,8 @@
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: allow-all
+  namespace: kubeflow-user-example-com
+spec:
+ rules:
+ - {}

openshift/openshiftstack/application/profiles-resources/base/kustomization.yaml

@@ -0,0 +1,7 @@
+## profiles component is deployed in openshift/openstack/kustomizaton.yaml
+## This component deploys resources required by profile controller KF 1.6 onwards
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- network_attachment.yaml
+- authorization_policy.yaml

openshift/openshiftstack/application/notebook-controller/base/configs/network_attachment.yaml → openshift/openshiftstack/application/profiles-resources/base/network_attachment.yaml

@@ -2,4 +2,4 @@ apiVersion: "k8s.cni.cncf.io/v1"
 kind: NetworkAttachmentDefinition
 metadata:
   name: istio-cni
-  namespace: kubeflow-user-example-com
+  namespace: kubeflow-user-example-com

openshift/openshiftstack/kustomization.yaml

@@ -6,7 +6,7 @@ resources:
   - ../../common/kubeflow-roles/base
 
 # This is here because it needs to install in namespace kubeflow
-#  - application/istio-1-14-OpenShift/network-attachment.yaml
+  - application/istio-1-14-OpenShift/network-attachment.yaml
 
 #Added custom centraldashboard to remove tensorboard
   - application/centraldashboard/base
@@ -27,8 +27,6 @@ resources:
 #Create defualt user
   - ../../common/user-namespace/base
 
-# Create network-attachment for default user namespace
-  - application/notebook-controller/base/configs/network_attachment.yaml
 
 configMapGenerator:
 - name: kubeflow-config