Cherry Pick of KF 1.3 on Openshift (#1811) (#1864)

* KF 1.3 on Openshift

* Adding fixes for pipeline portal and istio permissions

* Adding no auth to jupyter webapp and work around for Could not find CSRF

* Adding openshift istio-1-9-0

* Adding Virtual Service for pipelines

* Adding k8sapi for pipeline

* Updates to katib and kfdef

* Adding Katib

* Adding kfdef

* Fixing uri in kfptekton kfdef

* Addind gprc for pipeline

* Adding note for profile image

* Adding Volume

* Adding volumes web app

* Adding Volume

* Adding no auth to get rid of no user detected

* Fixing dep name

* Fixing dep name

* Fixing volume-web-app

* Adding Volume

* Adding KFP Tekton

* Adding scc for kf-tekton

* Rearranging apps in example kfdef

* Adding the env to eliminate double menu

* Adding owners

Co-authored-by: Juana Nakfour <jnakfour@redhat.com>

distributions/kfdef/OWNERS

@@ -7,3 +7,6 @@ approvers:
   - krishnadurai  
   - sudivate
   - yanniszark
+  - nakfour
+  - vpavlin
+  - crobby

distributions/kfdef/kfctl_openshift.master.kfptekton.yaml

@@ -117,5 +117,5 @@ spec:
     name: kfserving
   repos:
   - name: manifests
-    uri: https://github.com/kubeflow/manifests/archive/master.tar.gz
+    uri: https://github.com/kubeflow/manifests/archive/306d02979124bc29e48152272ddd60a59be9306c.tar.gz
   version: master

distributions/kfdef/kfctl_openshift_v1.3.0.yaml

@@ -0,0 +1,84 @@
+apiVersion: kfdef.apps.kubeflow.org/v1
+kind: KfDef
+metadata:
+  name: kubeflow
+  namespace: kubeflow
+spec:
+  applications:
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/openshift/openshift-scc
+    name: openshift-scc
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/istio-1-9-0-Openshift
+    name: istio-stack
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/cert-manager
+    name: cert-manager
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/kfp-tekton
+    name: kfp-tekton
+#Uncomment if you need KFP on Argo
+#  - kustomizeConfig:
+#      repoRef:
+#        name: manifests
+#        path: distributions/stacks/openshift/application/pipeline-agnostic
+#    name: pipeline
+  #Only install if you need kfserving, it takes a lot of resources
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/knative
+    name: knative
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/jupyter-web-app
+    name: jupyter-web-app
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/notebook-controller
+    name: notebook-controller
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/katib
+    name: katib
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/tf-job
+    name: tf-job
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/pytorch-job
+    name: pytorch-job
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/volumes-web-app
+    name: volumes-web-app
+  # This takes a long time, please wait for it
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift/application/kfserving
+    name: kfserving
+  - kustomizeConfig:
+      repoRef:
+        name: manifests
+        path: distributions/stacks/openshift
+    name: kubeflow-apps
+  repos:
+  - name: manifests
+    uri: https://github.com/kubeflow/manifests/archive/v1.3-branch.tar.gz
+  version: v1.3-branch

distributions/stacks/openshift/application/cert-manager/kustomization.yaml

@@ -4,10 +4,8 @@ commonLabels:
   app.kubernetes.io/name: cert-manager
   kustomize.component: cert-manager
 kind: Kustomization
-namespace: cert-manager
+#namespace: cert-manager
 resources:
-- ../../../../cert-manager/cert-manager/base
-- ../../../../cert-manager/cert-manager/overlays/application/application.yaml
-- ../../../../cert-manager/cert-manager/overlays/self-signed/cluster-issuer.yaml
-configurations:
-- ../../../../cert-manager/cert-manager/overlays/application/params.yaml
+- ../../../../../common/cert-manager/cert-manager-kube-system-resources/base
+- ../../../../../common/cert-manager/cert-manager-crds/base
+- ../../../../../common/cert-manager/cert-manager/overlays/self-signed

distributions/stacks/openshift/application/istio-1-9-0-Openshift/ingressgateway.route.yaml

@@ -0,0 +1,17 @@
+kind: Route
+apiVersion: route.openshift.io/v1
+metadata:
+  name: istio-ingressgateway
+  namespace: istio-system
+  labels:
+    app: istio-ingressgateway
+    istio: ingressgateway
+    release: istio
+spec:
+  to:
+    kind: Service
+    name: istio-ingressgateway
+    weight: 100
+  port:
+    targetPort: http2
+  wildcardPolicy: None

distributions/stacks/openshift/application/istio-1-9-0-Openshift/kustomization.yaml

@@ -0,0 +1,11 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+#namespace: istio-system
+resources:
+- namespace.yaml
+# Generated this file with 
+#istioctl profile dump openshift > openshift-profile.yaml
+# istioctl manifest generate -f openshift-profile.yaml -f profile-overlay.yaml > openshift_dump.yaml
+# from istio-1-9-0 folder
+- openshift_dump.yaml
+- ingressgateway.route.yaml

distributions/stacks/openshift/application/istio-1-9-0-Openshift/namespace.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: istio-system
+  labels:
+    istio-operator-managed: Reconcile
+    istio-injection: disabled

distributions/stacks/openshift/application/istio-1-9-0-Openshift/network-attachment.yaml

@@ -0,0 +1,5 @@
+apiVersion: "k8s.cni.cncf.io/v1"
+kind: NetworkAttachmentDefinition
+namespace: kubeflow
+metadata:
+  name: istio-cni