fix(manifests): Upgrading metacontroller to v4.11.22

[tarekabouzeid]

Description of your changes:
Upgrading metacontroller manifests to v4.11.22 according to this PR in Kubeflow manifests and this issue.

This entails changing metacontroller type from composite to decorator, as since metacontroller v3, it's not supported to watch namespaces which is preventing creating necessary K8s objects for KFP multi tenancy.

cc @juliusvonkohout @hbelmiro @HumairAK

Checklist:

• You have signed off your commits
• The title for your pull request (PR) should follow our title convention. Learn more about the pull request title convention used in this repository.

[juliusvonkohout]

Thank you very much. This should go at least into the kfp 2.5.0 release for kubeflow 1.10.1.

[juliusvonkohout]

Can we get rid of the update namespace permission? If yes please in both PRs. If we strictly need that permission that is also fine.

[tarekabouzeid]

Unfortunately it is needed by Decorator Controller, when i remove it i get the below error in metacontroller pod

{
    "level": "error",
    "ts": "2025-02-21T19:26:35Z",
    "msg": "Unhandled Error",
    "logger": "UnhandledError",
    "error": "failed to sync kubeflow-pipelines-profile-controller 'v1:Namespace::kubeflow-user-example-com': can't update Namespace /kubeflow-user-example-com: namespaces \"kubeflow-user-example-com\" is forbidden: User \"system:serviceaccount:kubeflow:meta-controller-service\" cannot update resource \"namespaces\" in API group \"\" in the namespace \"kubeflow-user-example-com\"",
    "stacktrace": "metacontroller/pkg/controller/decorator.(*decoratorController).processNextWorkItem\n\t/home/runner/work/metacontroller/metacontroller/pkg/controller/decorator/controller.go:320\nmetacontroller/pkg/controller/decorator.(*decoratorController).worker\n\t/home/runner/work/metacontroller/metacontroller/pkg/controller/decorator/controller.go:308\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil.func1\n\t/home/runner/go/pkg/mod/k8s.io/apimachinery@v0.32.0/pkg/util/wait/backoff.go:226\nk8s.io/apimachinery/pkg/util/wait.BackoffUntil\n\t/home/runner/go/pkg/mod/k8s.io/apimachinery@v0.32.0/pkg/util/wait/backoff.go:227\nk8s.io/apimachinery/pkg/util/wait.JitterUntil\n\t/home/runner/go/pkg/mod/k8s.io/apimachinery@v0.32.0/pkg/util/wait/backoff.go:204\nk8s.io/apimachinery/pkg/util/wait.Until\n\t/home/runner/go/pkg/mod/k8s.io/apimachinery@v0.32.0/pkg/util/wait/backoff.go:161\nmetacontroller/pkg/controller/decorator.(*decoratorController).Start.func1.1\n\t/home/runner/work/metacontroller/metacontroller/pkg/controller/decorator/controller.go:282"
}

[juliusvonkohout]

Except for #11656 (comment) it is a
/lgtm

[juliusvonkohout]

Then @hbelmiro @HumairAK please merge this to master such that we have it in KFP 2.5.0

[HumairAK]

/lgtm
/approve

[google-oss-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: HumairAK

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• manifests/kustomize/OWNERS [HumairAK]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment