Skip to content

Commit

Permalink
Replacement PR for PR kubeflow#1625 - Azure kfdef manifests for 1.2 a…
Browse files Browse the repository at this point in the history
…nd previous (kubeflow#1633)

* Add Azure owners (kubeflow#1524)

* Create v1.1.0 Azure Kfdef manifests (kubeflow#1487)

* kfdef for azure

* kfdef for azure

* Axure kfdef

* argo version update

* Owners

* OWNERS

* argo version

* Tickle owners

* Tickle owners

* Create v1.1.0 Azure Kfdef manifests with OIDC Azure AD  (kubeflow#1576)

* Rename rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system:auth-delegator.yaml to rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system-auth-delegator.yaml

* intial kdef

* indentation

* eof

* eof

* eof

* eof

* eof

* adding istio to azure stack

* indentation

* update URI

* Rename rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system-auth-delegator.yaml to rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system:auth-delegator.yaml

* placeholder for azure ad  values

* Add overlay to support Azure Database for MySQL (kubeflow#1587)

* Add readme file

* Add Azure overlay for metadata

* Add azure overlay and readme file

* Changed the default metadata db name to be metadata-db

* Remove duplicated file

* Few edits when proofreading the readme.md

* Adding db name to be optional

* move the overlay to azure stack folder

* using relative path for metadata folder

* Add Azure kfdef 1.2 manifests

* Remove Tensorboard from Azure Stack

* Adding myself as Azure stack approver
  • Loading branch information
berndverst committed Nov 12, 2020
1 parent 50fd92b commit 9412a48
Show file tree
Hide file tree
Showing 31 changed files with 646 additions and 0 deletions.
29 changes: 29 additions & 0 deletions istio/add-anonymous-user-filter-istio-1.6/envoy-filter.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
name: add-user-filter
namespace: istio-system
spec:
workloadSelector:
labels:
app: istio-ingressgateway
configPatches:
- applyTo: HTTP_FILTER
match:
context: GATEWAY
listener:
filterChain:
filter:
name: "envoy.http_connection_manager"
subFilter:
name: "envoy.router"
patch:
operation: INSERT_BEFORE
value:
name: envoy.lua
typed_config:
"@type": "type.googleapis.com/envoy.config.filter.http.lua.v2.Lua"
inlineCode: |
function envoy_on_request(request_handle)
request_handle:headers():add("kubeflow-userid","[email protected]")
end
5 changes: 5 additions & 0 deletions istio/add-anonymous-user-filter-istio-1.6/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: istio-system
resources:
- envoy-filter.yaml
3 changes: 3 additions & 0 deletions kfdef/OWNERS
Original file line number Diff line number Diff line change
@@ -1,6 +1,9 @@
approvers:
- adrian555
- dtzar
- eedorenko
- Jeffwan
- kkasravi
- krishnadurai
- sudivate
- yanniszark
58 changes: 58 additions & 0 deletions kfdef/kfctl_azure.v1.1.0.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
apiVersion: kfdef.apps.kubeflow.org/v1
kind: KfDef
metadata:
name: kubeflowmanifests
namespace: kubeflow
spec:
applications:
# It is expected to have Istio 1.6.x installed in istio-system namespace
- kustomizeConfig:
repoRef:
name: manifests
path: namespaces/base
name: namespaces
- kustomizeConfig:
repoRef:
name: manifests
path: application/v3
name: application
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-crds
name: cert-manager-crds
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-kube-system-resources
name: cert-manager-kube-system-resources
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/istio
name: istio
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/add-anonymous-user-filter-istio-1.6
name: add-anonymous-user-filter
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager
name: cert-manager
- kustomizeConfig:
repoRef:
name: manifests
path: metacontroller/base
name: metacontroller
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure
name: kubeflow-apps
repos:
- name: manifests
uri: https://github.com/kubeflow/manifests/archive/v1.1-branch.tar.gz
version: v1.1-branch

58 changes: 58 additions & 0 deletions kfdef/kfctl_azure.v1.2.0.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,58 @@
apiVersion: kfdef.apps.kubeflow.org/v1
kind: KfDef
metadata:
name: kubeflowmanifests
namespace: kubeflow
spec:
applications:
# It is expected to have Istio 1.6.x installed in istio-system namespace
- kustomizeConfig:
repoRef:
name: manifests
path: namespaces/base
name: namespaces
- kustomizeConfig:
repoRef:
name: manifests
path: application/v3
name: application
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-crds
name: cert-manager-crds
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-kube-system-resources
name: cert-manager-kube-system-resources
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/istio
name: istio
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/add-anonymous-user-filter-istio-1.6
name: add-anonymous-user-filter
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager
name: cert-manager
- kustomizeConfig:
repoRef:
name: manifests
path: metacontroller/base
name: metacontroller
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure
name: kubeflow-apps
repos:
- name: manifests
uri: https://github.com/kubeflow/manifests/archive/v1.2-branch.tar.gz
version: v1.2-branch

65 changes: 65 additions & 0 deletions kfdef/kfctl_azure_aad.v1.1.0.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
apiVersion: kfdef.apps.kubeflow.org/v1
kind: KfDef
metadata:
namespace: kubeflow
spec:
applications:
- kustomizeConfig:
repoRef:
name: manifests
path: namespaces/base
name: namespaces
- kustomizeConfig:
repoRef:
name: manifests
path: application/v3
name: application
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/istio-1-3-1-stack
name: istio-stack
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/kubernetes/application/cluster-local-gateway-1-3-1
name: cluster-local-gateway
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/istio
name: istio
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-crds
name: cert-manager-crds
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-kube-system-resources
name: cert-manager-kube-system-resources
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager
name: cert-manager
- kustomizeConfig:
repoRef:
name: manifests
path: metacontroller/base
name: metacontroller
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/oidc-authservice
name: oidc-authservice
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure
name: kubeflow-apps
repos:
- name: manifests
uri: https://github.com/kubeflow/manifests/archive/v1.1-branch.tar.gz
version: v1.1-branch
65 changes: 65 additions & 0 deletions kfdef/kfctl_azure_aad.v1.2.0.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,65 @@
apiVersion: kfdef.apps.kubeflow.org/v1
kind: KfDef
metadata:
namespace: kubeflow
spec:
applications:
- kustomizeConfig:
repoRef:
name: manifests
path: namespaces/base
name: namespaces
- kustomizeConfig:
repoRef:
name: manifests
path: application/v3
name: application
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/istio-1-3-1-stack
name: istio-stack
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/kubernetes/application/cluster-local-gateway-1-3-1
name: cluster-local-gateway
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/istio
name: istio
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-crds
name: cert-manager-crds
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager-kube-system-resources
name: cert-manager-kube-system-resources
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/cert-manager
name: cert-manager
- kustomizeConfig:
repoRef:
name: manifests
path: metacontroller/base
name: metacontroller
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure/application/oidc-authservice
name: oidc-authservice
- kustomizeConfig:
repoRef:
name: manifests
path: stacks/azure
name: kubeflow-apps
repos:
- name: manifests
uri: https://github.com/kubeflow/manifests/archive/v1.2-branch.tar.gz
version: v1.2-branch
5 changes: 5 additions & 0 deletions stacks/azure/OWNERS
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
approvers:
- berndverst
- dtzar
- eedorenko
- sudivate
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: istio-system
resources:
- ../../../../istio/add-anonymous-user-filter-istio-1.6
5 changes: 5 additions & 0 deletions stacks/azure/application/cert-manager-crds/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: cert-manager
resources:
- ../../../../cert-manager/cert-manager-crds/base
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: kube-system
resources:
- ../../../../cert-manager/cert-manager-kube-system-resources/base
14 changes: 14 additions & 0 deletions stacks/azure/application/cert-manager/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
apiVersion: kustomize.config.k8s.io/v1beta1
commonLabels:
app.kubernetes.io/component: cert-manager
app.kubernetes.io/name: cert-manager
kustomize.component: cert-manager
kind: Kustomization
namespace: cert-manager
resources:
- ../../../../cert-manager/cert-manager/base
- ../../../../cert-manager/cert-manager/overlays/application/application.yaml
- ../../../../cert-manager/cert-manager/overlays/self-signed/cluster-issuer.yaml
configurations:
- ../../../../cert-manager/cert-manager/overlays/application/params.yaml

6 changes: 6 additions & 0 deletions stacks/azure/application/istio-1-3-1-stack/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: istio-system
resources:
- ../../../../istio-1-3-1/istio-crds-1-3-1/base
- ../../../../istio-1-3-1/istio-install-1-3-1/base
12 changes: 12 additions & 0 deletions stacks/azure/application/istio/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: kubeflow
resources:
- ../../../../istio/istio/base
configMapGenerator:
- name: istio-parameters
behavior: merge
envs:
- params.env
configurations:
- params.yaml
1 change: 1 addition & 0 deletions stacks/azure/application/istio/params.env
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
clusterRbacConfig=OFF
3 changes: 3 additions & 0 deletions stacks/azure/application/istio/params.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
varReference:
- path: spec/mode
kind: ClusterRbacConfig
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
# TODO(https://github.com/kubeflow/manifests/issues/774): This is a patch
# that pulls out from core the parts that should be in pulled into stacks.
apiVersion: apps/v1
kind: Deployment
metadata:
name: deployment
spec:
template:
spec:
containers:
- name: jupyter-web-app
imagePullPolicy: $(policy)
env:
- name: ROK_SECRET_NAME
valueFrom:
configMapKeyRef:
name: jupyter-web-app-parameters
key: ROK_SECRET_NAME
- name: UI
valueFrom:
configMapKeyRef:
name: jupyter-web-app-parameters
key: UI
- name: USERID_HEADER
valueFrom:
configMapKeyRef:
name: kubeflow-config
key: userid-header
- name: USERID_PREFIX
valueFrom:
configMapKeyRef:
name: kubeflow-config
key: userid-prefix
Loading

0 comments on commit 9412a48

Please sign in to comment.