update kubeflow dip-catalog

2025-01-13 02:31:27 +00:00
parent 1dc1181a03
commit 5451f16d72
1959 changed files with 602337 additions and 0 deletions
@@ -0,0 +1,44 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kserve-models-web-app
+  namespace: kserve
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: kserve-models-web-app
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: kserve-models-web-app
+    spec:
+      containers:
+      - image: kserve/models-web-app:latest
+        imagePullPolicy: Always
+        name: kserve-models-web-app
+        envFrom:
+          - configMapRef:
+              name: kserve-models-web-app-config
+        ports:
+        - containerPort: 5000
+          name: http
+        livenessProbe:
+          httpGet:
+            path: /healthz/liveness
+            port: http
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          failureThreshold: 3
+          successThreshold: 1
+        readinessProbe:
+          httpGet:
+            path: /healthz/readiness
+            port: http
+          initialDelaySeconds: 0
+          periodSeconds: 10
+          timeoutSeconds: 1
+          failureThreshold: 3
+          successThreshold: 1
+      serviceAccountName: kserve-models-web-app
@@ -0,0 +1,21 @@
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: kserve-models-web-app
+  namespace: kserve
+spec:
+  gateways:
+  - knative-serving/knative-ingress-gateway
+  hosts:
+  - '*'
+  http:
+  - match:
+    - uri:
+        prefix: /kserve-endpoints/
+    rewrite:
+      uri: /
+    route:
+    - destination:
+        host: kserve-models-web-app.kserve.svc.cluster.local
+        port:
+          number: 80
@@ -0,0 +1,20 @@
+resources:
+- rbac.yaml
+- service.yaml
+- deployment.yaml
+- istio.yaml
+
+namespace: kserve
+
+commonLabels:
+  kustomize.component: kserve-models-web-app
+  app.kubernetes.io/component: kserve-models-web-app
+
+images:
+- name: kserve/models-web-app
+  newName: kserve/models-web-app
+  newTag: v0.13.0-rc.0
+configMapGenerator:
+  - name: kserve-models-web-app-config
+    literals:
+    - APP_DISABLE_AUTH="True"
@@ -0,0 +1,68 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: kserve-models-web-app
+  namespace: kserve
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kserve-models-web-app-cluster-role
+rules:
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  - pods
+  - pods/log
+  - events
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - serving.kserve.io
+  resources:
+  - inferenceservices
+  - inferenceservices/status
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - delete
+  - deletecollection
+  - patch
+  - update
+- apiGroups:
+  - serving.knative.dev
+  resources:
+  - services
+  - services/status
+  - routes
+  - routes/status
+  - configurations
+  - configurations/status
+  - revisions
+  - revisions/status
+  verbs:
+  - get
+  - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: kserve-models-web-app-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: kserve-models-web-app-cluster-role
+subjects:
+- kind: ServiceAccount
+  name: kserve-models-web-app
+  namespace: kserve
@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: kserve-models-web-app
+  namespace: kserve
+spec:
+  ports:
+  - name: http
+    port: 80
+    protocol: TCP
+    targetPort: 5000
+  selector:
+    app.kubernetes.io/component: kserve-models-web-app
+  type: ClusterIP
@@ -0,0 +1,42 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+# Adds namespace to all resources.
+namespace: kubeflow
+
+# Labels to add to all resources and selectors.
+commonLabels:
+  app: kserve
+  app.kubernetes.io/name: kserve
+
+bases:
+- ../../base
+- web-app-authorization-policy.yaml
+
+patchesStrategicMerge:
+- patches/web-app-sidecar.yaml
+
+patchesJson6902:
+- target:
+    group: networking.istio.io
+    version: v1beta1
+    kind: VirtualService
+    name: kserve-models-web-app
+    namespace: kserve
+  path: patches/web-app-vsvc.yaml
+
+generatorOptions:
+  disableNameSuffixHash: true
+
+# To make namespace for standalone installation kustomizable,
+# variabalize ingress gateway, webhook service name and
+# kserve namespace in webhook configurations
+configMapGenerator:
+  - name: kserve-models-web-app-config
+    behavior: replace
+    literals:
+    - USERID_HEADER=kubeflow-userid
+    - APP_PREFIX=/kserve-endpoints
+
+configurations:
+- params.yaml
@@ -0,0 +1,4 @@
+commonLabels:
+- kind: AuthorizationPolicy
+  path: spec/selector/matchLabels
+  create: true
@@ -0,0 +1,10 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kserve-models-web-app
+  namespace: kserve
+spec:
+  template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "true"
@@ -0,0 +1,14 @@
+- op: replace
+  path: /spec/gateways
+  value:
+    - kubeflow/kubeflow-gateway
+- op: replace
+  path: /spec/http/0/route/0/destination
+  value:
+    host: kserve-models-web-app.kubeflow.svc.cluster.local
+    port:
+      number: 80
+- op: replace
+  path: /spec/gateways
+  value:
+    - kubeflow/kubeflow-gateway
@@ -0,0 +1,18 @@
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  labels:
+    kustomize.component: kserve-models-web-app
+    app.kubernetes.io/component: kserve-models-web-app
+  name: kserve-models-web-app
+spec:
+  action: ALLOW
+  selector:
+    matchLabels:
+      kustomize.component: kserve-models-web-app
+      app.kubernetes.io/component: kserve-models-web-app
+  rules:
+  - from:
+    - source:
+        principals:
+        - cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account