102 lines
2.7 KiB
YAML
102 lines
2.7 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
sortOptions:
|
|
order: legacy
|
|
legacySortOptions:
|
|
orderFirst:
|
|
- Namespace
|
|
- ResourceQuota
|
|
- StorageClass
|
|
- CustomResourceDefinition
|
|
- MutatingWebhookConfiguration
|
|
- ServiceAccount
|
|
- PodSecurityPolicy
|
|
- NetworkPolicy
|
|
- Role
|
|
- ClusterRole
|
|
- RoleBinding
|
|
- ClusterRoleBinding
|
|
- ConfigMap
|
|
- Secret
|
|
- Endpoints
|
|
- Service
|
|
- LimitRange
|
|
- PriorityClass
|
|
- PersistentVolume
|
|
- PersistentVolumeClaim
|
|
- Deployment
|
|
- StatefulSet
|
|
- CronJob
|
|
- PodDisruptionBudget
|
|
- Ingress
|
|
orderLast:
|
|
- ValidatingWebhookConfiguration
|
|
|
|
resources:
|
|
# Cert-Manager
|
|
- common/cert-manager/cert-manager/base
|
|
- common/cert-manager/kubeflow-issuer/base
|
|
# Istio
|
|
- common/istio-1-22/istio-crds/base
|
|
- common/istio-1-22/istio-namespace/base
|
|
- common/istio-1-22/istio-install/overlays/oauth2-proxy
|
|
# oauth2-proxy
|
|
- common/oidc-client/oauth2-proxy/overlays/m2m-self-signed
|
|
# KNative
|
|
- common/knative/knative-serving/overlays/gateways
|
|
- common/knative/knative-eventing/base
|
|
- common/istio-1-22/cluster-local-gateway/base
|
|
# Kubeflow namespace
|
|
- common/kubeflow-namespace/base
|
|
# NetworkPolicies
|
|
- common/networkpolicies/base
|
|
# Kubeflow Roles
|
|
- common/kubeflow-roles/base
|
|
# Kubeflow Istio Resources
|
|
- common/istio-1-22/kubeflow-istio-resources/base
|
|
|
|
|
|
# Kubeflow Pipelines
|
|
- apps/pipeline/upstream/env/cert-manager/platform-agnostic-multi-user
|
|
# Katib
|
|
- apps/katib/upstream/installs/katib-with-kubeflow
|
|
# Central Dashboard
|
|
- apps/centraldashboard/upstream/overlays/oauth2-proxy
|
|
# Admission Webhook
|
|
- apps/admission-webhook/upstream/overlays/cert-manager
|
|
# Jupyter Web App
|
|
- apps/jupyter/jupyter-web-app/upstream/overlays/istio
|
|
# Notebook Controller
|
|
- apps/jupyter/notebook-controller/upstream/overlays/kubeflow
|
|
# Profiles + KFAM
|
|
- apps/profiles/upstream/overlays/kubeflow
|
|
# PVC Viewer
|
|
- apps/pvcviewer-controller/upstream/base
|
|
# Volumes Web App
|
|
- apps/volumes-web-app/upstream/overlays/istio
|
|
# Tensorboards Controller
|
|
- apps/tensorboard/tensorboard-controller/upstream/overlays/kubeflow
|
|
# Tensorboard Web App
|
|
- apps/tensorboard/tensorboards-web-app/upstream/overlays/istio
|
|
# Training Operator
|
|
- apps/training-operator/upstream/overlays/kubeflow
|
|
# User namespace
|
|
- common/user-namespace/base
|
|
|
|
# KServe
|
|
- contrib/kserve/kserve
|
|
- contrib/kserve/models-web-app/overlays/kubeflow
|
|
#- common/knative/knative-serving/base
|
|
#- common/knative/knative-eventing/base
|
|
|
|
# Ingress
|
|
- ingress.yaml
|
|
|
|
# Pod Security Standards
|
|
# https://kubernetes.io/docs/concepts/security/pod-security-standards/
|
|
# Uncomment to enable baseline level standards
|
|
# - ../contrib/security/PSS/static/baseline
|
|
# Uncomment to enable restricted level standards
|
|
# - ../contrib/security/PSS/static/restricted
|