feat: add Service Mesh operator and enable RHOAI dashboard

The RHOAI 3.x dashboard requires Service Mesh (Istio) for its gateway.
- Add Service Mesh 3 operator manifests
- Enable dashboard component in DataScienceCluster
- Remove deprecated serviceMesh field from DSCI

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Ambient Code Bot

.github/workflows/components-build-deploy.yml

@@ -208,6 +208,12 @@ jobs:
         run: |
           oc login ${{ secrets.OPENSHIFT_SERVER }} --token=${{ secrets.OPENSHIFT_TOKEN }} --insecure-skip-tls-verify
 
+      - name: Deploy Service Mesh operator via OLM
+        run: |
+          oc apply -f components/manifests/components/openshift-ai/service-mesh-namespace.yaml
+          oc apply -f components/manifests/components/openshift-ai/service-mesh-operatorgroup.yaml
+          oc apply -f components/manifests/components/openshift-ai/service-mesh-subscription.yaml
+
       - name: Deploy RHOAI operator via OLM
         run: |
           oc apply -f components/manifests/components/openshift-ai/namespace.yaml

.github/workflows/prod-release-deploy.yaml

@@ -347,6 +347,12 @@ jobs:
         run: |
           oc login ${{ secrets.PROD_OPENSHIFT_SERVER }} --token=${{ secrets.PROD_OPENSHIFT_TOKEN }} --insecure-skip-tls-verify
 
+      - name: Deploy Service Mesh operator via OLM
+        run: |
+          oc apply -f components/manifests/components/openshift-ai/service-mesh-namespace.yaml
+          oc apply -f components/manifests/components/openshift-ai/service-mesh-operatorgroup.yaml
+          oc apply -f components/manifests/components/openshift-ai/service-mesh-subscription.yaml
+
       - name: Deploy RHOAI operator via OLM
         run: |
           oc apply -f components/manifests/components/openshift-ai/namespace.yaml

components/manifests/components/openshift-ai/dsci.yaml

@@ -4,8 +4,6 @@ metadata:
   name: default-dsci
 spec:
   applicationsNamespace: redhat-ods-applications
-  serviceMesh:
-    managementState: Removed
   trustedCABundle:
     customCABundle: ""
     managementState: Managed

components/manifests/components/openshift-ai/kustomization.yaml

@@ -5,6 +5,9 @@ resources:
 - namespace.yaml
 - operatorgroup.yaml
 - subscription.yaml
+- service-mesh-namespace.yaml
+- service-mesh-operatorgroup.yaml
+- service-mesh-subscription.yaml
 - dsci.yaml
 - datasciencecluster.yaml
 - mlflow.yaml

components/manifests/components/openshift-ai/service-mesh-namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: openshift-service-mesh

components/manifests/components/openshift-ai/service-mesh-operatorgroup.yaml

@@ -0,0 +1,5 @@
+apiVersion: operators.coreos.com/v1
+kind: OperatorGroup
+metadata:
+  name: service-mesh-operator-group
+  namespace: openshift-service-mesh

components/manifests/components/openshift-ai/service-mesh-subscription.yaml

@@ -0,0 +1,11 @@
+apiVersion: operators.coreos.com/v1alpha1
+kind: Subscription
+metadata:
+  name: servicemeshoperator3
+  namespace: openshift-service-mesh
+spec:
+  channel: stable
+  installPlanApproval: Automatic
+  name: servicemeshoperator3
+  source: redhat-operators
+  sourceNamespace: openshift-marketplace