update kubeflow dip-catalog

charts/kubeflow/contrib/ray/kuberay-operator/base/aggregated-roles.yaml

@@ -0,0 +1,52 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubeflow-kuberay-admin
+  labels:
+    app: kuberay-operator
+    app.kubernetes.io/name: kuberay-operator
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-admin: "true"
+rules: []
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubeflow-kuberay-edit
+  labels:
+    app: kuberay-operator
+    app.kubernetes.io/name: kuberay-operator
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-edit: "true"
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-admin: "true"
+rules:
+  - apiGroups:
+      - ray.io
+    resources:
+      - "*"
+    verbs:
+      - get
+      - list
+      - watch
+      - create
+      - update
+      - patch
+      - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubeflow-kuberay-view
+  labels:
+    app: kuberay-operator
+    app.kubernetes.io/name: kuberay-operator
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-view: "true"
+rules:
+  - apiGroups:
+      - ray.io
+    resources:
+      - "*"
+    verbs:
+      - get
+      - list
+      - watch
+---

charts/kubeflow/contrib/ray/kuberay-operator/base/kustomization.yaml

@@ -0,0 +1,20 @@
+patches:
+# Add securityContext to KubeRay operator Pod.
+- target:
+    kind: Deployment
+    labelSelector: "app.kubernetes.io/name=kuberay-operator"
+  patch: |-
+    - op: add
+      path: /spec/template/spec/containers/0/securityContext
+      value:
+        runAsUser: 1000
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop: ["ALL"]
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
+namespace: kubeflow
+resources:
+- resources.yaml
+- aggregated-roles.yaml

charts/kubeflow/contrib/ray/kuberay-operator/overlays/kubeflow/kustomization.yaml

@@ -0,0 +1,3 @@
+namespace: kubeflow
+resources:
+- ../../base

charts/kubeflow/contrib/ray/kuberay-operator/overlays/standalone/kustomization.yaml

@@ -0,0 +1,4 @@
+namespace: kubeflow
+resources:
+- ../../base
+- namespace.yaml

charts/kubeflow/contrib/ray/kuberay-operator/overlays/standalone/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: kubeflow