chore: Removing PSS patches

[biswassri]

Pull Request Template for Kubeflow manifests Issues

✏️ A brief description of the changes

Removed the PSS security patches that are no longer needed based on description in this issue #2970

📦 List any dependencies that are required for this change

My PR depends on #

🐛 If this PR is related to an issue, please put the link to the issue here.

#2970

✅ Contributor checklist

• Make sure you have tested with kustomize. See Installation Prerequisites
• All the commits have been signed-off (To pass the DCO check)

---

You can join the CNCF Slack and access our meetings at the Kubeflow Community website. Our channel on the CNCF Slack is here #kubeflow-platform.

[juliusvonkohout]

Thank you. you need to sigh for the DCO

# sign the latest X commits with HEAD~X
git rebase --signoff HEAD~1
# You have to force push afterwards
git push -f

[juliusvonkohout]

Warning: existing pods in namespace "istio-system" violate the new PodSecurity enforce level "restricted:latest"

can you check which pod does not have the full security context? Maybe jwks-proxy?

[juliusvonkohout]

Yes i think https://github.com/kubeflow/manifests/blob/master/common/oauth2-proxy/components/cluster-jwks-proxy/cluster-jwks-proxy.yaml needs the securitycontext.

        securityContext:
          allowPrivilegeEscalation: false
          seccompProfile:
            type: RuntimeDefault
          runAsNonRoot: true
          capabilities:
            drop:
            - ALL

[juliusvonkohout]

@biswassri do you want to continue here?

[biswassri]

@juliusvonkohout Apologies for the delay. Updated the securitycontext for the said cluster. Waiting for the CI to pass now.

[juliusvonkohout]

Thank you very much. The next step then is to fix the seccomprofile as described in the other issues and PRs. To fix it for the istio-ingressgateway as well.
/lgtm
/approve

[google-oss-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: juliusvonkohout

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• apps/pipeline/upstream/OWNERS [juliusvonkohout]
• common/oauth2-proxy/OWNERS [juliusvonkohout]
• contrib/OWNERS [juliusvonkohout]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment