v2: add multi-user manifests (#1313)

* v2: add multi-user manifests Add multi-user manifests and remove cache and metadata-writer. Signed-off-by: Yihong Wang <[email protected]> * remove kfp-csi-s3 driver comment it out from the kustomization.yaml files but still add them to the manifests Signed-off-by: Yihong Wang <[email protected]> --------- Signed-off-by: Yihong Wang <[email protected]>
kubeflow · Aug 3, 2023 · 19b0913 · 19b0913
1 parent 23eb9eb
commit 19b0913
Show file tree

Hide file tree

Showing 10 changed files with 845 additions and 6 deletions.
diff --git a/manifests/kustomize/base/installs/multi-user/api-service/cluster-role.yaml b/manifests/kustomize/base/installs/multi-user/api-service/cluster-role.yaml
@@ -47,3 +47,32 @@ rules:
   - tokenreviews
   verbs:
   - create
+- apiGroups:
+  - tekton.dev
+  resources:
+  - pipelineruns
+  - taskruns
+  - conditions
+  - runs
+  - customruns
+  - tasks
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - custom.tekton.dev
+  resources:
+  - pipelineloops
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
diff --git a/manifests/kustomize/base/installs/multi-user/kustomization.yaml b/manifests/kustomize/base/installs/multi-user/kustomization.yaml
@@ -6,7 +6,6 @@ commonLabels:
   app.kubernetes.io/component: ml-pipeline
 resources:
 - ../../pipeline/cluster-scoped
-- ../../cache-deployer/cluster-scoped
 - ../generic
 - view-edit-cluster-roles.yaml
 - api-service
@@ -15,8 +14,6 @@ resources:
 - scheduled-workflow
 - viewer-controller
 - persistence-agent
-- cache
-- metadata-writer
 - istio-authorization-config.yaml
 - virtual-service.yaml
 patchesStrategicMerge:
@@ -26,8 +23,6 @@ patchesStrategicMerge:
 - scheduled-workflow/deployment-patch.yaml
 - viewer-controller/deployment-patch.yaml
 - persistence-agent/deployment-patch.yaml
-- metadata-writer/deployment-patch.yaml
-- cache/deployment-patch.yaml
 
 configurations:
 - params.yaml
diff --git a/manifests/kustomize/base/installs/multi-user/persistence-agent/cluster-role.yaml b/manifests/kustomize/base/installs/multi-user/persistence-agent/cluster-role.yaml
@@ -24,4 +24,21 @@ rules:
   resources:
   - namespaces
   verbs:
-  - get
+  - get
+- apiGroups:
+  - tekton.dev
+  resources:
+  - pipelineruns
+  - taskruns
+  - conditions
+  - runs
+  - customruns
+  - tasks
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
diff --git a/manifests/kustomize/base/installs/multi-user/scheduled-workflow/cluster-role.yaml b/manifests/kustomize/base/installs/multi-user/scheduled-workflow/cluster-role.yaml
@@ -35,3 +35,32 @@ rules:
   verbs:
   - create
   - patch
+- apiGroups:
+  - tekton.dev
+  resources:
+  - pipelineruns
+  - taskruns
+  - conditions
+  - runs
+  - customruns
+  - tasks
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - custom.tekton.dev
+  resources:
+  - pipelineloops
+  verbs:
+  - create
+  - get
+  - list
+  - watch
+  - update
+  - patch
+  - delete
diff --git a/manifests/kustomize/env/platform-agnostic-tekton-multi-user/kustomization.yaml b/manifests/kustomize/env/platform-agnostic-tekton-multi-user/kustomization.yaml
@@ -0,0 +1,86 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+bases:
+  - ../../base/installs/multi-user
+  - ../../base/metadata/base
+  - ../../base/metadata/options/istio
+  - ../../third-party/tekton/installs/cluster
+  - ../../third-party/tekton-custom-task
+  - ../../third-party/mysql/base
+  - ../../third-party/mysql/options/istio
+  - ../../third-party/minio/base
+  - ../../third-party/minio/options/istio
+  - ../../third-party/metacontroller/base
+  # - ../../third-party/kfp-csi-s3
+
+# Identifier for application manager to apply ownerReference.
+# The ownerReference ensures the resources get garbage collected
+# when application is deleted.
+commonLabels:
+  application-crd-id: kubeflow-pipelines
+
+images:
+- name: gcr.io/ml-pipeline/api-server
+  newName: quay.io/aipipeline/apiserver
+  newTag: 2.0.0
+- name: gcr.io/ml-pipeline/persistenceagent
+  newName: quay.io/aipipeline/persistenceagent
+  newTag: 2.0.0
+- name: gcr.io/ml-pipeline/scheduledworkflow
+  newName: quay.io/aipipeline/scheduledworkflow
+  newTag: 2.0.0
+
+patches:
+- patch: |-
+    apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: ml-pipeline
+    spec:
+      template:
+        spec:
+          containers:
+            - name: ml-pipeline-api-server
+              env:
+              - name: EXECUTIONTYPE
+                value: PipelineRun
+- patch: |-
+    apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: ml-pipeline-persistenceagent
+    spec:
+      template:
+        spec:
+          containers:
+            - name: ml-pipeline-persistenceagent
+              env:
+              - name: EXECUTIONTYPE
+                value: PipelineRun
+- patch: |-
+    apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: ml-pipeline-scheduledworkflow
+    spec:
+      template:
+        spec:
+          containers:
+            - name: ml-pipeline-scheduledworkflow
+              env:
+              - name: EXECUTIONTYPE
+                value: PipelineRun
+- patch: |-
+    apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: ml-pipeline-ui
+    spec:
+      template:
+        spec:
+          containers:
+            - name: ml-pipeline-ui
+              env:
+              - name: POD_LOG_CONTAINER_NAME
+                value: step-user-main
diff --git a/manifests/kustomize/env/platform-agnostic-tekton/kustomization.yaml b/manifests/kustomize/env/platform-agnostic-tekton/kustomization.yaml
@@ -8,6 +8,7 @@ resources:
 - ../../third-party/tekton-custom-task
 - ../../third-party/minio/base
 - ../../third-party/mysql/base
+# - ../../third-party/kfp-csi-s3
 
 # Identifier for application manager to apply ownerReference.
 # The ownerReference ensures the resources get garbage collected