KFP support for pss restricted

[Copilot]

KFP v1 and v2 restricted support and test

[github-actions]

Welcome to the Kubeflow Manifests Repository

Thanks for opening your first PR. Your contribution means a lot to the Kubeflow community.

Before making more PRs:
Please ensure your PR follows our Contributing Guide.
Please also be aware that many components are synchronizes from upstream via the scripts in /scripts.
So in some cases you have to fix the problem in the upstream repositories first, but you can use a PR against kubeflow/manifests to test the platform integration.

Community Resources:

• CNCF Slack channels: https://www.kubeflow.org/docs/about/community/#kubeflow-slack-channels
• Community meetings: https://www.kubeflow.org/docs/about/community/

Thanks again for helping to improve Kubeflow.

[juliusvonkohout]

/approve

[google-oss-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: juliusvonkohout

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [juliusvonkohout]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[akagami-harsh]

/lgtm

[juliusvonkohout]

Force merging since the trainer test is broken

[akagami-harsh]

@juliusvonkohout, This PyTorchJob https://github.com/kubeflow/manifests/blob/master/tests/training_operator_job.yaml used by test also need to be PSS restricted compliant, because the container in this PyTorchJob are getting blocked by the PSS.

harshvir@msi:~/manifests$ k describe pytorchjobs.kubeflow.org -n kubeflow-user-example-com pytorch-simple 
Name:         pytorch-simple
Namespace:    kubeflow-user-example-com
Labels:       <none>
Annotations:  <none>
API Version:  kubeflow.org/v1
Kind:         PyTorchJob
Metadata:
  Creation Timestamp:  2026-03-20T21:48:10Z
  Generation:          1
  Resource Version:    13694
  UID:                 0ae7462d-c48d-47cd-96d0-b4ee3785e44a
Spec:
  Pytorch Replica Specs:
    Master:
      Replicas:        1
      Restart Policy:  OnFailure
      Template:
        Metadata:
          Labels:
            sidecar.istio.io/inject:  false
        Spec:
          Containers:
            Command:
              python3
              /opt/pytorch-mnist/mnist.py
              --epochs=1
              --no-cuda
              --batch-size=32
              --log-interval=50
              --lr=0.01
              --test-batch-size=1000
            Env:
              Name:             PYTHONUNBUFFERED
              Value:            1
              Name:             OMP_NUM_THREADS
              Value:            1
              Name:             CUDA_VISIBLE_DEVICES
              Value:            
              Name:             MALLOC_TRIM_THRESHOLD_
              Value:            0
              Name:             MALLOC_MMAP_MAX_
              Value:            0
            Image:              docker.io/kubeflowkatib/pytorch-mnist:v1beta1-45c5727
            Image Pull Policy:  Always
            Name:               pytorch
            Resources:
              Limits:
                Cpu:     4000m
                Memory:  1Gi
              Requests:
                Cpu:     300m
                Memory:  512Mi
    Worker:
      Replicas:        1
      Restart Policy:  OnFailure
      Template:
        Metadata:
          Labels:
            sidecar.istio.io/inject:  false
        Spec:
          Containers:
            Command:
              python3
              /opt/pytorch-mnist/mnist.py
              --epochs=1
              --no-cuda
              --batch-size=32
              --log-interval=50
              --lr=0.01
              --test-batch-size=1000
            Env:
              Name:             PYTHONUNBUFFERED
              Value:            1
              Name:             OMP_NUM_THREADS
              Value:            1
              Name:             CUDA_VISIBLE_DEVICES
              Value:            
              Name:             MALLOC_TRIM_THRESHOLD_
              Value:            0
              Name:             MALLOC_MMAP_MAX_
              Value:            0
            Image:              docker.io/kubeflowkatib/pytorch-mnist:v1beta1-45c5727
            Image Pull Policy:  Always
            Name:               pytorch
            Resources:
              Limits:
                Cpu:     4000m
                Memory:  1Gi
              Requests:
                Cpu:     300m
                Memory:  512Mi
Events:
  Type     Reason           Age                   From                   Message
  ----     ------           ----                  ----                   -------
  Warning  FailedCreatePod  6m9s (x3 over 6m50s)  pytorchjob-controller  Error creating: pods "pytorch-simple-worker-0" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (containers "init-pytorch", "pytorch" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (containers "init-pytorch", "pytorch" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or containers "init-pytorch", "pytorch" must set securityContext.runAsNonRoot=true), seccompProfile (pod or containers "init-pytorch", "pytorch" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")
  Warning  FailedCreatePod  82s (x14 over 6m50s)  pytorchjob-controller  Error creating: pods "pytorch-simple-master-0" is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false (container "pytorch" must set securityContext.allowPrivilegeEscalation=false), unrestricted capabilities (container "pytorch" must set securityContext.capabilities.drop=["ALL"]), runAsNonRoot != true (pod or container "pytorch" must set securityContext.runAsNonRoot=true), seccompProfile (pod or container "pytorch" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost")

[akagami-harsh]

And i think, we might also need to make init-pytorch container injected by training operator to be PSS restricted compliant in the upstream repo

[juliusvonkohout]

#3414