DSPv2 NetworkPolicy changes

[rimolive]

Add NetworkPolicy for kfp-driver and TaskRuns to allow access to AP Server

The issue resolved by this Pull Request:

Resolves #369

Description of your changes:

kfp-driver is located under openshift-pipelines namespace, and it needs access to DSP API Server. On the DSP namespace, TaskRun pods also need access to API Server.

The NetworkPolicy changes are made to satisfy the new v2 requirements

Testing instructions

• Deploy DSPOv2
• Create a DSPA CR under a specific namespace
• Use the iris-pipeline example to create and run a pipeline
• The pipeline run should finish successfuly

Checklist

• The commits are squashed in a cohesive manner and have meaningful messages.
• Testing instructions have been added in the PR body (for PRs involving changes that are not immediately obvious).
• The developer has manually tested the changes and verified that the changes work

[dsp-developers]

A new image has been built to help with testing out this PR: quay.io/opendatahub/data-science-pipelines-operator:pr-413
An OCP cluster where you are logged in as cluster admin is required.

To use this image run the following:

cd $(mktemp -d)
git clone git@github.com:opendatahub-io/data-science-pipelines-operator.git
cd data-science-pipelines-operator/
git fetch origin pull/413/head
git checkout -b pullrequest 1416f286a50937a1e08e2b39bd0639231385bdd7
make deploy IMG="quay.io/opendatahub/data-science-pipelines-operator:pr-413"

More instructions here on how to deploy and test a Data Science Pipelines Application.

[DharmitD]

/lgtm

[HumairAK]

/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: HumairAK

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [HumairAK]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment