You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
72 lines
2.4 KiB
72 lines
2.4 KiB
# This kustomization copies the `katib-standalone` one with following exclusions:
|
|
# - No Job is spawned to generate TLS key for `katib-controller` Service
|
|
# - Instead, the Service and WebhookConfigurations linked to it are annotated
|
|
# for OpenShift service controller to handle TLS certification.
|
|
#
|
|
# Requires OpenShift version: 4.4+
|
|
#
|
|
# To achieve this, run:
|
|
#
|
|
# `kustomize build ./manifests/v1beta1/installs/katib-openshift | oc apply -f - -l type!=local`
|
|
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: kubeflow
|
|
resources:
|
|
# Namespace.
|
|
- ../../components/namespace/
|
|
# Katib controller.
|
|
- ../../components/controller/
|
|
# Katib CRDs.
|
|
- ../../components/crd/
|
|
# Katib DB manager.
|
|
- ../../components/db-manager/
|
|
# Katib DB mysql.
|
|
- ../../components/mysql/
|
|
# Katib UI.
|
|
- ../../components/ui/
|
|
# Katib webhooks.
|
|
- ../../components/webhook/
|
|
images:
|
|
- name: ghcr.io/kubeflow/katib/katib-controller
|
|
newName: ghcr.io/kubeflow/katib/katib-controller
|
|
newTag: v0.18.0
|
|
- name: ghcr.io/kubeflow/katib/katib-db-manager
|
|
newName: ghcr.io/kubeflow/katib/katib-db-manager
|
|
newTag: v0.18.0
|
|
- name: ghcr.io/kubeflow/katib/katib-ui
|
|
newName: ghcr.io/kubeflow/katib/katib-ui
|
|
newTag: v0.18.0
|
|
|
|
patchesJson6902:
|
|
# Annotate Service to delegate TLS-secret generation to OpenShift service controller
|
|
# https://docs.openshift.com/container-platform/4.6/security/certificates/service-serving-certificate.html#add-service-certificate_service-serving-certificate
|
|
- target:
|
|
group: ""
|
|
version: v1
|
|
kind: Service
|
|
name: katib-controller
|
|
namespace: kubeflow
|
|
path: patches/service-serving-cert.yaml
|
|
# Annotate WebhookConfigurations to delegate `caBundle` population to OpenShift service controller
|
|
# https://docs.openshift.com/container-platform/4.6/security/certificates/service-serving-certificate.html#add-service-certificate-mutating-webhook_service-serving-certificate
|
|
- target:
|
|
group: admissionregistration.k8s.io
|
|
version: v1
|
|
kind: ValidatingWebhookConfiguration
|
|
name: katib.kubeflow.org
|
|
path: patches/webhook-inject-cabundle.yaml
|
|
- target:
|
|
group: admissionregistration.k8s.io
|
|
version: v1
|
|
kind: MutatingWebhookConfiguration
|
|
name: katib.kubeflow.org
|
|
path: patches/webhook-inject-cabundle.yaml
|
|
|
|
configMapGenerator:
|
|
- name: katib-config
|
|
behavior: create
|
|
files:
|
|
- katib-config.yaml
|
|
options:
|
|
disableNameSuffixHash: true
|
|
|