Change chart directory structure

2026-01-19 11:11:33 +09:00
parent 113bcfdf5b
commit 1c0c62291f
5947 changed files with 4134 additions and 1 deletions
@@ -0,0 +1,14 @@
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: profiles-kfam
+spec:
+  action: ALLOW
+  rules:
+    - from:
+        - source:
+            principals:
+              - cluster.local/ns/kubeflow/sa/centraldashboard
+  selector:
+    matchLabels:
+      kustomize.component: profiles
@@ -0,0 +1,32 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kubeflow
+resources:
+- ../../base
+- service.yaml
+- virtual-service.yaml
+- authorizationpolicy.yaml
+
+commonLabels:
+  kustomize.component: profiles
+
+patchesStrategicMerge:
+- patches/kfam.yaml
+- patches/remove-namespace.yaml
+
+configurations:
+- params.yaml
+
+vars:
+- name: PROFILES_NAMESPACE
+  fieldref:
+    fieldpath: metadata.namespace
+  objref:
+    name: profiles-kfam
+    kind: Service
+    apiVersion: v1
+
+images:
+- name: ghcr.io/kubeflow/kubeflow/kfam
+  newName: ghcr.io/kubeflow/kubeflow/kfam
+  newTag: v1.10.0
@@ -0,0 +1,3 @@
+varReference:
+- path: spec/http/route/destination/host
+  kind: VirtualService
@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: deployment
+spec:
+  template:
+    metadata:
+      labels:
+        sidecar.istio.io/inject: "true"
+    spec:
+      containers:
+      - command:
+        - /access-management
+        - "-cluster-admin"
+        - $(ADMIN)
+        - "-userid-header"
+        - $(USERID_HEADER)
+        - "-userid-prefix"
+        - $(USERID_PREFIX)
+        envFrom:
+          - configMapRef:
+              name: config
+        image: ghcr.io/kubeflow/kubeflow/kfam
+        imagePullPolicy: IfNotPresent
+        name: kfam
+        livenessProbe:
+          httpGet:
+            path: /metrics
+            port: 8081
+          initialDelaySeconds: 30
+          periodSeconds: 30
+        ports:
+        - containerPort: 8081
+          name: kfam-http
+          protocol: TCP
+        securityContext:
+          allowPrivilegeEscalation: false
+          seccompProfile:
+            type: RuntimeDefault
+          runAsNonRoot: true
+          capabilities:
+            drop:
+            - ALL
+      serviceAccountName: controller-service-account
@@ -0,0 +1,5 @@
+$patch: delete
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: system
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: profiles-kfam
+spec:
+  ports:
+    - port: 8081
@@ -0,0 +1,24 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: profiles-kfam
+spec:
+  gateways:
+  - kubeflow-gateway
+  hosts:
+  - '*'
+  http:
+  - headers:
+      request:
+        add:
+          x-forwarded-prefix: /kfam
+    match:
+    - uri:
+        prefix: /kfam/
+    rewrite:
+      uri: /kfam/
+    route:
+    - destination:
+        host: profiles-kfam.$(PROFILES_NAMESPACE).svc.cluster.local
+        port:
+          number: 8081
@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+- ../../base
+namespace: profiles-system