Skip to content
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,10 @@ metadata:
name: katib-webhook-cert
spec:
isCA: true
commonName: $(KATIB_SERVICE_NAME).$(KATIB_NAMESPACE).svc
commonName: KATIB_SERVICE_NAME_PLACEHOLDER.KATIB_NAMESPACE_PLACEHOLDER.svc
dnsNames:
- $(KATIB_SERVICE_NAME).$(KATIB_NAMESPACE).svc
- $(KATIB_SERVICE_NAME).$(KATIB_NAMESPACE).svc.cluster.local
- KATIB_SERVICE_NAME_PLACEHOLDER.KATIB_NAMESPACE_PLACEHOLDER.svc
- KATIB_SERVICE_NAME_PLACEHOLDER.KATIB_NAMESPACE_PLACEHOLDER.svc.cluster.local
issuerRef:
kind: Issuer
name: katib-selfsigned-issuer
Expand Down
203 changes: 146 additions & 57 deletions manifests/v1beta1/installs/katib-cert-manager/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -1,69 +1,158 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: kubeflow
resources:
# Namespace.
- ../../components/namespace
# Katib controller.
- ../../components/controller/
# Katib CRDs.
- ../../components/crd/
# Katib DB manager.
- ../../components/db-manager/
# Katib DB mysql.
- ../../components/mysql/
# Katib UI.
- ../../components/ui/
# Katib webhooks.
- ../../components/webhook/
# Cert-manager certificate for webhooks
- certificate.yaml
# Namespace.
- ../../components/namespace
# Katib controller.
- ../../components/controller/
# Katib CRDs.
- ../../components/crd/
# Katib DB manager.
- ../../components/db-manager/
# Katib DB mysql.
- ../../components/mysql/
# Katib UI.
- ../../components/ui/
# Katib webhooks.
- ../../components/webhook/
# Cert-manager certificate for webhooks
- certificate.yaml
images:
- name: ghcr.io/kubeflow/katib/katib-controller
newName: ghcr.io/kubeflow/katib/katib-controller
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-db-manager
newName: ghcr.io/kubeflow/katib/katib-db-manager
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-ui
newName: ghcr.io/kubeflow/katib/katib-ui
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-controller
newName: ghcr.io/kubeflow/katib/katib-controller
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-db-manager
newName: ghcr.io/kubeflow/katib/katib-db-manager
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-ui
newName: ghcr.io/kubeflow/katib/katib-ui
newTag: latest

patchesStrategicMerge:
- patches/katib-cert-injection.yaml

vars:
- fieldref:
fieldPath: metadata.namespace
name: KATIB_NAMESPACE
objref:
apiVersion: v1
kind: Service
name: katib-controller
- fieldref:
fieldPath: metadata.name
name: KATIB_SERVICE_NAME
objref:
apiVersion: v1
kind: Service
name: katib-controller
- name: KATIB_CERT_NAME
objref:
kind: Certificate
group: cert-manager.io
version: v1
name: katib-webhook-cert
fieldref:
fieldpath: metadata.name

configurations:
- params.yaml
- params.yaml

configMapGenerator:
- name: katib-config
behavior: create
files:
- katib-config.yaml
- behavior: create
files:
- katib-config.yaml
name: katib-config
options:
disableNameSuffixHash: true
patches:
- path: patches/katib-cert-injection.yaml
replacements:
- source:
fieldPath: metadata.namespace
kind: Service
name: katib-controller
version: v1
targets:
- fieldPaths:
- spec.commonName
options:
delimiter: .
index: 1
select:
group: cert-manager.io
kind: Certificate
name: katib-webhook-cert
version: v1
- fieldPaths:
- spec.dnsNames.0
options:
delimiter: .
index: 1
select:
group: cert-manager.io
kind: Certificate
name: katib-webhook-cert
version: v1
- fieldPaths:
- spec.dnsNames.1
options:
delimiter: .
index: 1
select:
group: cert-manager.io
kind: Certificate
name: katib-webhook-cert
version: v1
- fieldPaths:
- metadata.annotations.[cert-manager.io/inject-ca-from]
options:
delimiter: /
create: true
select:
group: admissionregistration.k8s.io
kind: ValidatingWebhookConfiguration
version: v1
- fieldPaths:
- metadata.annotations.[cert-manager.io/inject-ca-from]
options:
disableNameSuffixHash: true
delimiter: /
create: true
select:
group: admissionregistration.k8s.io
kind: MutatingWebhookConfiguration
version: v1
- source:
fieldPath: metadata.name
kind: Service
name: katib-controller
version: v1
targets:
- fieldPaths:
- spec.commonName
options:
delimiter: .
select:
group: cert-manager.io
kind: Certificate
name: katib-webhook-cert
version: v1
- fieldPaths:
- spec.dnsNames.0
options:
delimiter: .
select:
group: cert-manager.io
kind: Certificate
name: katib-webhook-cert
version: v1
- fieldPaths:
- spec.dnsNames.1
options:
delimiter: .
select:
group: cert-manager.io
kind: Certificate
name: katib-webhook-cert
version: v1
- source:
fieldPath: metadata.name
kind: Certificate
name: katib-webhook-cert
targets:
- fieldPaths:
- metadata.annotations.[cert-manager.io/inject-ca-from]
options:
delimiter: /
index: 1
create: true
select:
group: admissionregistration.k8s.io
kind: ValidatingWebhookConfiguration
version: v1
- fieldPaths:
- metadata.annotations.[cert-manager.io/inject-ca-from]
options:
delimiter: /
index: 1
create: true
select:
group: admissionregistration.k8s.io
kind: MutatingWebhookConfiguration
version: v1
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,11 @@ kind: ValidatingWebhookConfiguration
metadata:
name: katib.kubeflow.org
annotations:
cert-manager.io/inject-ca-from: $(KATIB_NAMESPACE)/$(KATIB_CERT_NAME)
cert-manager.io/inject-ca-from: KATIB_NAMESPACE_PLACEHOLDER/KATIB_CERT_NAME_PLACEHOLDER
---
apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
name: katib.kubeflow.org
annotations:
cert-manager.io/inject-ca-from: $(KATIB_NAMESPACE)/$(KATIB_CERT_NAME)
cert-manager.io/inject-ca-from: KATIB_NAMESPACE_PLACEHOLDER/KATIB_CERT_NAME_PLACEHOLDER
73 changes: 36 additions & 37 deletions manifests/v1beta1/installs/katib-external-db/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -1,45 +1,44 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: kubeflow
resources:
# Namespace.
- ../../components/namespace/
# Katib controller.
- ../../components/controller/
# Katib CRDs.
- ../../components/crd/
# Katib DB manager.
- ../../components/db-manager/
# Katib UI.
- ../../components/ui/
# Katib webhooks.
- ../../components/webhook/
# Namespace.
- ../../components/namespace/
# Katib controller.
- ../../components/controller/
# Katib CRDs.
- ../../components/crd/
# Katib DB manager.
- ../../components/db-manager/
# Katib UI.
- ../../components/ui/
# Katib webhooks.
- ../../components/webhook/
images:
- name: ghcr.io/kubeflow/katib/katib-controller
newName: ghcr.io/kubeflow/katib/katib-controller
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-db-manager
newName: ghcr.io/kubeflow/katib/katib-db-manager
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-ui
newName: ghcr.io/kubeflow/katib/katib-ui
newTag: latest
patchesStrategicMerge:
- patches/db-manager.yaml
- name: ghcr.io/kubeflow/katib/katib-controller
newName: ghcr.io/kubeflow/katib/katib-controller
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-db-manager
newName: ghcr.io/kubeflow/katib/katib-db-manager
newTag: latest
- name: ghcr.io/kubeflow/katib/katib-ui
newName: ghcr.io/kubeflow/katib/katib-ui
newTag: latest
# Modify katib-mysql-secrets with parameters for the DB.
secretGenerator:
- name: katib-mysql-secrets
envs:
- secrets.env
# Secret for webhooks certs.
- name: katib-webhook-cert
options:
disableNameSuffixHash: true
secretGenerator:
- envs:
- secrets.env
name: katib-mysql-secrets
- name: katib-webhook-cert
options:
disableNameSuffixHash: true
configMapGenerator:
- name: katib-config
behavior: create
files:
- katib-config.yaml
options:
disableNameSuffixHash: true
- behavior: create
files:
- katib-config.yaml
name: katib-config
options:
disableNameSuffixHash: true
patches:
- path: patches/db-manager.yaml
23 changes: 11 additions & 12 deletions manifests/v1beta1/installs/katib-leader-election/kustomization.yaml
Original file line number Diff line number Diff line change
@@ -1,18 +1,17 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: kubeflow
resources:
- ../katib-standalone
# rbac for leader-election
- leader-election-rbac.yaml
resources:
- ../katib-standalone
- leader-election-rbac.yaml
replicas:
- name: katib-controller
count: 2
- count: 2
name: katib-controller
configMapGenerator:
- name: katib-config
behavior: replace
files:
- katib-config.yaml
options:
disableNameSuffixHash: true
- behavior: replace
files:
- katib-config.yaml
name: katib-config
options:
disableNameSuffixHash: true
Loading
Loading