Add instructions on upgrade kfp-tekton multi-users and fix new multi-…

…users permission (kubeflow#581)

* add instrctions on upgrade kfp-tekton and fix multi-users permission

* Apply suggestions from code review

Co-authored-by: Andrew Butler <Andrew.Butler@ibm.com>

* Fix markdown links after suggestions

Co-authored-by: Andrew Butler <Andrew.Butler@ibm.com>

guides/kfp_tekton_install.md

@@ -8,6 +8,7 @@
   * [Other Cloud Providers or On-Prem Kubernetes Deployment](#other-cloud-providers-or-on-prem-kubernetes-deployment)
 - [Standalone Kubeflow Pipelines with Tekton Backend Deployment](#standalone-kubeflow-pipelines-with-tekton-backend-deployment)
 - [Kubeflow installation including Kubeflow Pipelines with Tekton Backend](#kubeflow-installation-including-kubeflow-pipelines-with-tekton-backend)
+- [Upgrade to Multi-User KFP-Tekton on Kubeflow](#upgrade-to-multi-user-kfp-tekton-on-kubeflow)
 - [Troubleshooting](#troubleshooting)
 
 ## Installation Targets and Prerequisites
@@ -82,6 +83,23 @@ To install the standalone Kubeflow Pipelines with Tekton, run the following step
 3. Visit [KFP Tekton Admin Guide](/guides/kfp-admin-guide.md) for how to configure kfp-tekton with different settings.
 
 
+## Upgrade to Multi-User KFP-Tekton on Kubeflow
+
+1. If you haven't installed Kubeflow 1.3+, Follow the [Kubeflow install instructions](https://www.kubeflow.org/docs/ibm/deploy/install-kubeflow-on-iks/#kubeflow-installation) to install Kubeflow with multi-user capabilities.
+
+2. To upgrade to the Multi-User version of KFP-Tekton, custom task controllers, and core Tekton controller, please run
+
+   ```shell
+   kubectl apply -k manifests/kustomize/env/platform-agnostic-multi-user
+   ```
+
+   If you only want to upgrade the core KFP-Tekton (no custom task and Tekton upgrade), run
+
+   ```shell
+   kubectl apply -k manifests/kustomize/env/plain-multi-user
+   ```
+
+
 ## Troubleshooting
 
  - (For IBM Cloud IKS users) If you accidentally deployed Kubeflow with IBM Cloud File Storage, run the below commands to remove the existing pvc. The below commands are for removing resources in multi-user, so you can ignore any missing pvc or rollout error if you are doing this for single user.

manifests/kustomize/base/installs/multi-user/cache/cluster-role.yaml

@@ -29,3 +29,14 @@ rules:
   - watch
   - update
   - patch
+- apiGroups:
+  - tekton.dev
+  resources:
+  - taskruns
+  - taskruns/status
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch