Add kubeflow/v1.10.0

charts/kubeflow/apps/profiles/upstream/overlays/kubeflow/kustomization.yaml

@@ -27,6 +27,6 @@ vars:
     apiVersion: v1
 
 images:
-- name: docker.io/kubeflownotebookswg/kfam
-  newName: docker.io/kubeflownotebookswg/kfam
-  newTag: v1.9.0
+- name: ghcr.io/kubeflow/kubeflow/kfam
+  newName: ghcr.io/kubeflow/kubeflow/kfam
+  newTag: v1.10.0

charts/kubeflow/apps/profiles/upstream/overlays/kubeflow/patches/kfam.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   template:
     metadata:
-      annotations:
+      labels:
         sidecar.istio.io/inject: "true"
     spec:
       containers:
@@ -20,7 +20,7 @@ spec:
         envFrom:
           - configMapRef:
               name: config
-        image: docker.io/kubeflownotebookswg/kfam
+        image: ghcr.io/kubeflow/kubeflow/kfam
         imagePullPolicy: IfNotPresent
         name: kfam
         livenessProbe:
@@ -33,4 +33,12 @@ spec:
         - containerPort: 8081
           name: kfam-http
           protocol: TCP
+        securityContext:
+          allowPrivilegeEscalation: false
+          seccompProfile:
+            type: RuntimeDefault
+          runAsNonRoot: true
+          capabilities:
+            drop:
+            - ALL
       serviceAccountName: controller-service-account