Update kubeflow/kfp-tekton manifests from 2.0.1 (#2545)

Update to kfp-tekton v2.0.1

Signed-off-by: Yihong Wang <[email protected]>

README.md

@@ -58,7 +58,7 @@ This repo periodically syncs all official Kubeflow components from their respect
 | KServe | contrib/kserve/kserve | [v0.11.0](https://github.com/kserve/kserve/tree/v0.11.0/install/v0.11.0) |
 | KServe Models Web App | contrib/kserve/models-web-app | [v0.10.0](https://github.com/kserve/models-web-app/tree/v0.10.0/config) |
 | Kubeflow Pipelines | apps/pipeline/upstream | [2.0.1](https://github.com/kubeflow/pipelines/tree/2.0.1/manifests/kustomize) |
-| Kubeflow Tekton Pipelines | apps/kfp-tekton/upstream | [v2.0.0](https://github.com/kubeflow/kfp-tekton/tree/v2.0.0/manifests/kustomize) |
+| Kubeflow Tekton Pipelines | apps/kfp-tekton/upstream | [2.0.1](https://github.com/kubeflow/kfp-tekton/tree/2.0.x/manifests/kustomize) |
 
 The following is also a matrix with versions from common components that are
 used from the different projects of Kubeflow:

apps/kfp-tekton/upstream/base/cache-deployer/kustomization.yaml

@@ -8,4 +8,4 @@ commonLabels:
   app: cache-deployer
 images:
   - name: gcr.io/ml-pipeline/cache-deployer
-    newTag: 2.0.0
+    newTag: 2.0.1

apps/kfp-tekton/upstream/base/cache/kustomization.yaml

@@ -10,4 +10,4 @@ commonLabels:
   app: cache-server
 images:
   - name: gcr.io/ml-pipeline/cache-server
-    newTag: 2.0.0
+    newTag: 2.0.1

apps/kfp-tekton/upstream/base/installs/generic/pipeline-install-config.yaml

@@ -11,7 +11,7 @@ data:
     until the changes take effect. A quick way to restart all deployments in a
     namespace: `kubectl rollout restart deployment -n <your-namespace>`.
   appName: pipeline
-  appVersion: 2.0.0
+  appVersion: 2.0.1
   dbHost: mysql
   dbPort: "3306"
   mlmdDb: metadb

apps/kfp-tekton/upstream/base/installs/multi-user/persistence-agent/cluster-role.yaml

@@ -19,6 +19,13 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - pipelines.kubeflow.org
+  resources:
+  - scheduledworkflows
+  - workflows
+  verbs:
+  - report
 - apiGroups:
   - ''
   resources:

apps/kfp-tekton/upstream/base/metadata/base/kustomization.yaml

@@ -10,4 +10,4 @@ resources:
 namespace: kubeflow
 images:
   - name: gcr.io/ml-pipeline/metadata-envoy
-    newTag: 2.0.0
+    newTag: 2.0.1

apps/kfp-tekton/upstream/base/pipeline/kustomization.yaml

@@ -37,14 +37,14 @@ resources:
   - kfp-launcher-configmap.yaml
 images:
   - name: gcr.io/ml-pipeline/api-server
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: gcr.io/ml-pipeline/persistenceagent
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: gcr.io/ml-pipeline/scheduledworkflow
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: gcr.io/ml-pipeline/frontend
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: gcr.io/ml-pipeline/viewer-crd-controller
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: gcr.io/ml-pipeline/visualization-server
-    newTag: 2.0.0
+    newTag: 2.0.1

apps/kfp-tekton/upstream/base/pipeline/metadata-writer/kustomization.yaml

@@ -7,4 +7,4 @@ resources:
   - metadata-writer-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/metadata-writer
-    newTag: 2.0.0
+    newTag: 2.0.1

apps/kfp-tekton/upstream/base/pipeline/ml-pipeline-persistenceagent-deployment.yaml

@@ -38,4 +38,15 @@ spec:
           requests:
             cpu: 120m
             memory: 500Mi
+        volumeMounts:
+          - mountPath: /var/run/secrets/kubeflow/tokens
+            name: persistenceagent-sa-token
       serviceAccountName: ml-pipeline-persistenceagent
+      volumes:
+        - name: persistenceagent-sa-token
+          projected:
+            sources:
+              - serviceAccountToken:
+                  path: persistenceagent-sa-token
+                  expirationSeconds: 3600
+                  audience: pipelines.kubeflow.org

apps/kfp-tekton/upstream/base/pipeline/ml-pipeline-persistenceagent-role.yaml

@@ -19,6 +19,13 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - pipelines.kubeflow.org
+  resources:
+  - scheduledworkflows
+  - workflows
+  verbs:
+  - report
 - apiGroups:
   - ''
   resources:

apps/kfp-tekton/upstream/env/gcp/inverse-proxy/kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 images:
   - name: gcr.io/ml-pipeline/inverse-proxy-agent
-    newTag: 2.0.0
+    newTag: 2.0.1
 resources:
   - proxy-configmap.yaml
   - proxy-deployment.yaml

apps/kfp-tekton/upstream/env/plain-multi-user/kustomization.yaml

@@ -0,0 +1,22 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base/installs/multi-user
+  - ../../base/metadata/base
+  - ../../base/metadata/options/istio
+  - ../../third-party/mysql/base
+  - ../../third-party/mysql/options/istio
+  - ../../third-party/minio/base
+  - ../../third-party/minio/options/istio
+  - ../../third-party/metacontroller/base
+
+# Identifier for application manager to apply ownerReference.
+# The ownerReference ensures the resources get garbage collected
+# when application is deleted.
+commonLabels:
+  application-crd-id: kubeflow-pipelines
+
+# !!! If you want to customize the namespace,
+# please also update base/cache-deployer/cluster-scoped/cache-deployer-clusterrolebinding.yaml
+namespace: kubeflow

apps/kfp-tekton/upstream/env/plain/kustomization.yaml

@@ -0,0 +1,18 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../../base/installs/generic
+  - ../../base/metadata/base
+  - ../../third-party/minio/base
+  - ../../third-party/mysql/base
+
+# Identifier for application manager to apply ownerReference.
+# The ownerReference ensures the resources get garbage collected
+# when application is deleted.
+commonLabels:
+  application-crd-id: kubeflow-pipelines
+
+# !!! If you want to customize the namespace,
+# please also update base/cache-deployer/cluster-scoped/cache-deployer-clusterrolebinding.yaml
+namespace: kubeflow

apps/kfp-tekton/upstream/env/platform-agnostic-tekton-multi-user/kustomization.yaml

@@ -1,18 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-bases:
-  - ../../base/installs/multi-user
-  - ../../base/metadata/base
-  - ../../base/metadata/options/istio
+resources:
   - ../../third-party/tekton/installs/cluster
   - ../../third-party/tekton-custom-task
-  - ../../third-party/mysql/base
-  - ../../third-party/mysql/options/istio
-  - ../../third-party/minio/base
-  - ../../third-party/minio/options/istio
-  - ../../third-party/metacontroller/base
-  # - ../../third-party/kfp-csi-s3
+  - ../plain-multi-user
 
 # Identifier for application manager to apply ownerReference.
 # The ownerReference ensures the resources get garbage collected
@@ -23,13 +15,13 @@ commonLabels:
 images:
 - name: gcr.io/ml-pipeline/api-server
   newName: quay.io/aipipeline/apiserver
-  newTag: 2.0.0
+  newTag: 2.0.1
 - name: gcr.io/ml-pipeline/persistenceagent
   newName: quay.io/aipipeline/persistenceagent
-  newTag: 2.0.0
+  newTag: 2.0.1
 - name: gcr.io/ml-pipeline/scheduledworkflow
   newName: quay.io/aipipeline/scheduledworkflow
-  newTag: 2.0.0
+  newTag: 2.0.1
 
 patches:
 - patch: |-

apps/kfp-tekton/upstream/env/platform-agnostic-tekton/kustomization.yaml

@@ -2,13 +2,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- ../../base/installs/generic
-- ../../base/metadata/base
 - ../../third-party/tekton/installs/cluster
 - ../../third-party/tekton-custom-task
-- ../../third-party/minio/base
-- ../../third-party/mysql/base
-# - ../../third-party/kfp-csi-s3
+- ../plain
 
 # Identifier for application manager to apply ownerReference.
 # The ownerReference ensures the resources get garbage collected
@@ -17,13 +13,13 @@ resources:
 images:
 - name: gcr.io/ml-pipeline/api-server
   newName: quay.io/aipipeline/apiserver
-  newTag: 2.0.0
+  newTag: 2.0.1
 - name: gcr.io/ml-pipeline/persistenceagent
   newName: quay.io/aipipeline/persistenceagent
-  newTag: 2.0.0
+  newTag: 2.0.1
 - name: gcr.io/ml-pipeline/scheduledworkflow
   newName: quay.io/aipipeline/scheduledworkflow
-  newTag: 2.0.0
+  newTag: 2.0.1
 
 labels:
 - includeSelectors: true

apps/kfp-tekton/upstream/env/platform-openshift-pipelines/kustomization.yaml

@@ -2,10 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
 resources:
-- ../../base/installs/generic
-- ../../base/metadata/base
-- ../../third-party/minio/base
-- ../../third-party/mysql/base
+- ../plain
 - ../../third-party/openshift-pipelines-custom-task
 - ../../third-party/openshift/standalone
 
@@ -67,13 +64,13 @@ patches:
 images:
 - name: gcr.io/ml-pipeline/api-server
   newName: quay.io/aipipeline/apiserver
-  newTag: 2.0.0
+  newTag: 2.0.1
 - name: gcr.io/ml-pipeline/persistenceagent
   newName: quay.io/aipipeline/persistenceagent
-  newTag: 2.0.0
+  newTag: 2.0.1
 - name: gcr.io/ml-pipeline/scheduledworkflow
   newName: quay.io/aipipeline/scheduledworkflow
-  newTag: 2.0.0
+  newTag: 2.0.1
 
 labels:
 - includeSelectors: true

apps/kfp-tekton/upstream/third-party/tekton-custom-task/kustomization.yaml

@@ -16,16 +16,16 @@ images:
     newTag: 1.7.1
   - name: kfp-v2-dev-driver-controller
     newName: quay.io/aipipeline/tekton-driver
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: tekton-exithandler-controller
     newName: quay.io/aipipeline/tekton-exithandler-controller
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: tekton-exithandler-webhook
     newName: quay.io/aipipeline/tekton-exithandler-webhook
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: tekton-kfptask-controller
     newName: quay.io/aipipeline/tekton-kfptask-controller
-    newTag: 2.0.0
+    newTag: 2.0.1
   - name: tekton-kfptask-webhook
     newName: quay.io/aipipeline/tekton-kfptask-webhook
-    newTag: 2.0.0
+    newTag: 2.0.1

apps/kfp-tekton/upstream/v1/base/installs/multi-user/istio-authorization-config.yaml

@@ -93,6 +93,16 @@ spec:
 ---
 apiVersion: "networking.istio.io/v1alpha3"
 kind: DestinationRule
+metadata:
+  name: ml-pipeline-persistenceagent
+spec:
+  host: ml-pipeline-persistenceagent.kubeflow.svc.cluster.local
+  trafficPolicy:
+    tls:
+      mode: ISTIO_MUTUAL
+---
+apiVersion: "networking.istio.io/v1alpha3"
+kind: DestinationRule
 metadata:
   name: ml-pipeline-visualizationserver
 spec: