Update JupyterHub deployment to version v0.3.7 (#585)

* Update JH Cluster Role

* This commit updates cluster role for JupyterHub. This is required to access metrics from gpu-operator. These
metrics are used to determine available GPUs for a user.
* Use a custom image-pullers RoleBinding for JH to prevent overwriting/deleting the default `system:image-pullers` default Rolebinding

Signed-off-by: Landon LaSmith <LLaSmith@redhat.com>

* Update JupyterHub to v0.3.7

Signed-off-by: Landon LaSmith <LLaSmith@redhat.com>

Co-authored-by: Vaishnavi Hire <vhire@redhat.com>

Author: LaVLaS

jupyterhub/jupyterhub/base/jupyterhub-cluster-role.yaml

@@ -22,3 +22,8 @@ rules:
       - ''
     resources:
       - nodes
+      - pods
+      - serviceaccounts
+      - secrets
+      - services
+      - namespaces

jupyterhub/jupyterhub/base/jupyterhub-dc.yaml

@@ -154,7 +154,7 @@ spec:
             secretKeyRef:
               name: $(traefik_credentials_secret)
               key: TRAEFIK_API_PASSWORD
-        image: quay.io/odh-jupyterhub/jupyterhub-img:v0.3.6
+        image: quay.io/odh-jupyterhub/jupyterhub-img:v0.3.7
         imagePullPolicy: "Always"
         name: jupyterhub
         ports:
@@ -236,7 +236,7 @@ spec:
               key: POSTGRESQL_PASSWORD
         - name: JUPYTERHUB_DATABASE_HOST
           value: jupyterhub-db
-        image: quay.io/odh-jupyterhub/jupyterhub-img:v0.3.6
+        image: quay.io/odh-jupyterhub/jupyterhub-img:v0.3.7
         imagePullPolicy: "Always"
         name: wait-for-database
         resources:

jupyterhub/jupyterhub/base/jupyterhub-notebook-image-puller-rb.yaml

@@ -1,10 +1,8 @@
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
-  name: 'system:image-pullers'
+  name: 'jupyterhub-image-puller'
 subjects:
-  # This group is always created by default when a new project is created but we have to explicitly include it to
-  # prevent image pull authorization denials when images are built from source in the JH server namespace
   - kind: Group
     apiGroup: rbac.authorization.k8s.io
     name: 'system:serviceaccounts:$(namespace)'