Add istio sidecar inject false to deployments in kubeflow ns (#712)

* Add istio sidecar inject false to deployments

* Revert cert-manager changes

* Revert unneeded changes

admission-webhook/webhook/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c
@@ -16,4 +19,4 @@ spec:
       - name: webhook-cert
         secret:
           secretName: webhook-certs
-      serviceAccountName: service-account    
+      serviceAccountName: service-account

aws/aws-alb-ingress-controller/base/deployment.yaml

@@ -17,6 +17,8 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: alb-ingress-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
         - name: alb-ingress-controller
@@ -48,4 +50,4 @@ spec:
           # Repository location of the ALB Ingress Controller.
           image: docker.io/amazon/aws-alb-ingress-controller:v1.1.2
           imagePullPolicy: Always
-      serviceAccountName: alb-ingress-controller
+      serviceAccountName: alb-ingress-controller

common/basic-auth/base/gatekeeper-deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: basic-auth
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app

common/basic-auth/base/kflogin-deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: basic-auth-login
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app

common/centraldashboard/base/deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: centraldashboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/centraldashboard

common/spartakus/base/deployment.yaml

@@ -10,6 +10,8 @@ spec:
     metadata:
       labels:
         app: spartakus-volunteer
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

gcp/cloud-endpoints/base/deployment.yaml

@@ -8,6 +8,8 @@ spec:
     metadata:
       labels:
         app: cloud-endpoints-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/cloud-solutions-group/cloud-endpoints-controller:0.2.1

jupyter/jupyter-web-app/base/deployment.yaml

@@ -5,6 +5,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

jupyter/notebook-controller/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: manager

katib/katib-controller/base/katib-controller-deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: katib-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       serviceAccountName: katib-controller
       containers:

katib/katib-controller/base/katib-db-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: katib
         component: db
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-db

katib/katib-controller/base/katib-manager-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: katib
         component: manager
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-manager

katib/katib-controller/base/katib-ui-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: katib
         component: ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-ui

kubebench/base/deployment.yaml

@@ -10,6 +10,8 @@ spec:
     metadata:
       labels:
         app: kubebench-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: kubebench-config

modeldb/base/artifact-store-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: modeldb
         tier: artifact-store
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

modeldb/base/backend-deployment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: backend
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

modeldb/base/mysql-backend-deployment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: mysql
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

modeldb/base/proxy-deployment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: backend-proxy
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

modeldb/base/webapp-deplyment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: webapp
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: vertaaiofficial/modeldb-frontend:kubeflow

mpi-job/mpi-operator/base/deployment.yaml

@@ -11,6 +11,8 @@ spec:
     metadata:
       labels:
         app: mpi-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

mxnet-job/mxnet-operator/base/deployment.yaml

@@ -8,6 +8,8 @@ spec:
     metadata:
       labels:
         name: mxnet-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

pipeline/api-service/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: ml-pipeline
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-api-server
@@ -15,9 +18,9 @@ spec:
         image: gcr.io/ml-pipeline/api-server
         imagePullPolicy: IfNotPresent
         command:
-          - apiserver 
+          - apiserver
           - --config=/etc/ml-pipeline-config
-          - --sampleconfig=/config/sample_config.json 
+          - --sampleconfig=/config/sample_config.json
           - -logtostderr=true
         ports:
         - containerPort: 8888
@@ -25,7 +28,7 @@ spec:
         volumeMounts:
         - name: config-volume
           mountPath: /etc/ml-pipeline-config
-      serviceAccountName: ml-pipeline      
+      serviceAccountName: ml-pipeline
       volumes:
         - name: config-volume
           configMap:

pipeline/minio/base/deployment.yaml

@@ -6,6 +6,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: minio

pipeline/mysql/base/deployment.yaml

@@ -6,6 +6,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: mysql

pipeline/persistent-agent/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: persistenceagent
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-persistenceagent

pipeline/pipeline-visualization-service/base/deployment.yaml

@@ -12,6 +12,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-visualizationserver
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/ml-pipeline/visualization-server

pipeline/pipelines-ui/base/deployment.yaml

@@ -12,6 +12,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-ui

pipeline/pipelines-ui/overlays/gcp/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: ml-pipeline-ui
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: gcp-sa-token

pipeline/pipelines-viewer/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: controller-deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

pipeline/scheduledworkflow/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: ml-pipeline-scheduledworkflow
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-scheduledworkflow

profiles/base/deployment.yaml

@@ -5,6 +5,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

pytorch-job/pytorch-operator/base/deployment.yaml

@@ -11,6 +11,8 @@ spec:
     metadata:
       labels:
         name: pytorch-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

spark/spark-operator/base/deploy.yaml

@@ -16,6 +16,7 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
         prometheus.io/scrape: "true"
+        sidecar.istio.io/inject: "false"
       initializers:
         pending: []
       labels:

tektoncd/tektoncd-dashboard/base/deployment.yaml

@@ -7,6 +7,8 @@ spec:
   template:
     metadata:
       name: tekton-dashboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: tekton-dashboard

tektoncd/tektoncd-install/base/deployment.yaml

@@ -15,6 +15,7 @@ spec:
     metadata:
       annotations:
         cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
+        sidecar.istio.io/inject: "false"
       labels:
         app: tekton-pipelines-controller
 #        app.kubernetes.io/component: controller
@@ -83,6 +84,7 @@ spec:
     metadata:
       annotations:
         cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
+        sidecar.istio.io/inject: "false"
       labels:
         app: tekton-pipelines-webhook
 #        app.kubernetes.io/component: webhook-controller

tensorboard/base/deployment.yaml

@@ -10,6 +10,8 @@ spec:
     metadata:
       labels:
         app: tensorboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

tests/admission-webhook-webhook-base_test.go

@@ -101,6 +101,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c
@@ -113,7 +116,7 @@ spec:
       - name: webhook-cert
         secret:
           secretName: webhook-certs
-      serviceAccountName: service-account    
+      serviceAccountName: service-account
 `)
 	th.writeF("/manifests/admission-webhook/webhook/base/mutating-webhook-configuration.yaml", `
 apiVersion: admissionregistration.k8s.io/v1beta1

tests/admission-webhook-webhook-overlays-application_test.go

@@ -156,6 +156,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c
@@ -168,7 +171,7 @@ spec:
       - name: webhook-cert
         secret:
           secretName: webhook-certs
-      serviceAccountName: service-account    
+      serviceAccountName: service-account
 `)
 	th.writeF("/manifests/admission-webhook/webhook/base/mutating-webhook-configuration.yaml", `
 apiVersion: admissionregistration.k8s.io/v1beta1

tests/admission-webhook-webhook-overlays-cert-manager_test.go

@@ -188,6 +188,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c
@@ -200,7 +203,7 @@ spec:
       - name: webhook-cert
         secret:
           secretName: webhook-certs
-      serviceAccountName: service-account    
+      serviceAccountName: service-account
 `)
 	th.writeF("/manifests/admission-webhook/webhook/base/mutating-webhook-configuration.yaml", `
 apiVersion: admissionregistration.k8s.io/v1beta1

tests/aws-aws-alb-ingress-controller-base_test.go

@@ -84,6 +84,8 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: alb-ingress-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
         - name: alb-ingress-controller
@@ -115,7 +117,8 @@ spec:
           # Repository location of the ALB Ingress Controller.
           image: docker.io/amazon/aws-alb-ingress-controller:v1.1.2
           imagePullPolicy: Always
-      serviceAccountName: alb-ingress-controller`)
+      serviceAccountName: alb-ingress-controller
+`)
 	th.writeF("/manifests/aws/aws-alb-ingress-controller/base/service-account.yaml", `
 apiVersion: v1
 kind: ServiceAccount

tests/aws-aws-alb-ingress-controller-overlays-application_test.go

@@ -136,6 +136,8 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: alb-ingress-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
         - name: alb-ingress-controller
@@ -167,7 +169,8 @@ spec:
           # Repository location of the ALB Ingress Controller.
           image: docker.io/amazon/aws-alb-ingress-controller:v1.1.2
           imagePullPolicy: Always
-      serviceAccountName: alb-ingress-controller`)
+      serviceAccountName: alb-ingress-controller
+`)
 	th.writeF("/manifests/aws/aws-alb-ingress-controller/base/service-account.yaml", `
 apiVersion: v1
 kind: ServiceAccount

tests/aws-aws-alb-ingress-controller-overlays-vpc_test.go

@@ -141,6 +141,8 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: alb-ingress-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
         - name: alb-ingress-controller
@@ -172,7 +174,8 @@ spec:
           # Repository location of the ALB Ingress Controller.
           image: docker.io/amazon/aws-alb-ingress-controller:v1.1.2
           imagePullPolicy: Always
-      serviceAccountName: alb-ingress-controller`)
+      serviceAccountName: alb-ingress-controller
+`)
 	th.writeF("/manifests/aws/aws-alb-ingress-controller/base/service-account.yaml", `
 apiVersion: v1
 kind: ServiceAccount

tests/common-basic-auth-base_test.go

@@ -30,6 +30,8 @@ spec:
     metadata:
       labels:
         app: basic-auth-login
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app
@@ -53,6 +55,8 @@ spec:
     metadata:
       labels:
         app: basic-auth
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app

tests/common-basic-auth-overlays-istio_test.go

@@ -67,6 +67,8 @@ spec:
     metadata:
       labels:
         app: basic-auth-login
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app
@@ -90,6 +92,8 @@ spec:
     metadata:
       labels:
         app: basic-auth
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app

tests/common-centraldashboard-base_test.go

@@ -65,6 +65,8 @@ spec:
     metadata:
       labels:
         app: centraldashboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/centraldashboard

tests/common-centraldashboard-overlays-application_test.go

@@ -136,6 +136,8 @@ spec:
     metadata:
       labels:
         app: centraldashboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/centraldashboard

tests/common-centraldashboard-overlays-istio_test.go

@@ -103,6 +103,8 @@ spec:
     metadata:
       labels:
         app: centraldashboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/centraldashboard

tests/common-spartakus-base_test.go

@@ -58,6 +58,8 @@ spec:
     metadata:
       labels:
         app: spartakus-volunteer
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

tests/common-spartakus-overlays-application_test.go

@@ -108,6 +108,8 @@ spec:
     metadata:
       labels:
         app: spartakus-volunteer
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

tests/gcp-cloud-endpoints-base_test.go

@@ -100,6 +100,8 @@ spec:
     metadata:
       labels:
         app: cloud-endpoints-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/cloud-solutions-group/cloud-endpoints-controller:0.2.1

tests/gcp-cloud-endpoints-overlays-application_test.go

@@ -148,6 +148,8 @@ spec:
     metadata:
       labels:
         app: cloud-endpoints-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/cloud-solutions-group/cloud-endpoints-controller:0.2.1

tests/gcp-cloud-endpoints-overlays-gcp-credentials_test.go

@@ -131,6 +131,8 @@ spec:
     metadata:
       labels:
         app: cloud-endpoints-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/cloud-solutions-group/cloud-endpoints-controller:0.2.1

tests/jupyter-jupyter-web-app-base_test.go

@@ -220,6 +220,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

tests/jupyter-jupyter-web-app-overlays-application_test.go

@@ -286,6 +286,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

tests/jupyter-jupyter-web-app-overlays-istio_test.go

@@ -259,6 +259,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

tests/jupyter-notebook-controller-base_test.go

@@ -216,6 +216,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: manager

tests/jupyter-notebook-controller-overlays-application_test.go

@@ -272,6 +272,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: manager

tests/jupyter-notebook-controller-overlays-istio_test.go

@@ -250,6 +250,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: manager

tests/katib-katib-controller-base_test.go

@@ -70,6 +70,8 @@ spec:
     metadata:
       labels:
         app: katib-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       serviceAccountName: katib-controller
       containers:
@@ -286,6 +288,8 @@ spec:
       labels:
         app: katib
         component: db
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-db
@@ -391,6 +395,8 @@ spec:
       labels:
         app: katib
         component: manager
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-manager
@@ -458,6 +464,8 @@ spec:
       labels:
         app: katib
         component: ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-ui

tests/katib-katib-controller-overlays-application_test.go

@@ -149,6 +149,8 @@ spec:
     metadata:
       labels:
         app: katib-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       serviceAccountName: katib-controller
       containers:
@@ -365,6 +367,8 @@ spec:
       labels:
         app: katib
         component: db
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-db
@@ -470,6 +474,8 @@ spec:
       labels:
         app: katib
         component: manager
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-manager
@@ -537,6 +543,8 @@ spec:
       labels:
         app: katib
         component: ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-ui

tests/katib-katib-controller-overlays-ibm-storage-config_test.go

@@ -95,6 +95,8 @@ spec:
     metadata:
       labels:
         app: katib-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       serviceAccountName: katib-controller
       containers:
@@ -311,6 +313,8 @@ spec:
       labels:
         app: katib
         component: db
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-db
@@ -416,6 +420,8 @@ spec:
       labels:
         app: katib
         component: manager
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-manager
@@ -483,6 +489,8 @@ spec:
       labels:
         app: katib
         component: ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-ui

tests/katib-katib-controller-overlays-istio_test.go

@@ -107,6 +107,8 @@ spec:
     metadata:
       labels:
         app: katib-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       serviceAccountName: katib-controller
       containers:
@@ -323,6 +325,8 @@ spec:
       labels:
         app: katib
         component: db
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-db
@@ -428,6 +432,8 @@ spec:
       labels:
         app: katib
         component: manager
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-manager
@@ -495,6 +501,8 @@ spec:
       labels:
         app: katib
         component: ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-ui

tests/kubebench-base_test.go

@@ -120,6 +120,8 @@ spec:
     metadata:
       labels:
         app: kubebench-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: kubebench-config

tests/kubebench-overlays-application_test.go

@@ -168,6 +168,8 @@ spec:
     metadata:
       labels:
         app: kubebench-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: kubebench-config

tests/kubebench-overlays-istio_test.go

@@ -157,6 +157,8 @@ spec:
     metadata:
       labels:
         app: kubebench-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: kubebench-config

tests/modeldb-base_test.go

@@ -34,6 +34,8 @@ spec:
       labels:
         app: modeldb
         tier: artifact-store
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:
@@ -88,6 +90,8 @@ spec:
       labels:
         app: modeldb
         tier: backend
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:
@@ -176,6 +180,8 @@ spec:
       labels:
         app: modeldb
         tier: mysql
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:
@@ -245,6 +251,8 @@ spec:
       labels:
         app: modeldb
         tier: backend-proxy
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:
@@ -323,6 +331,8 @@ spec:
       labels:
         app: modeldb
         tier: webapp
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: vertaaiofficial/modeldb-frontend:kubeflow

tests/mpi-job-mpi-operator-base_test.go

@@ -229,6 +229,8 @@ spec:
     metadata:
       labels:
         app: mpi-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

tests/mpi-job-mpi-operator-overlays-application_test.go

@@ -276,6 +276,8 @@ spec:
     metadata:
       labels:
         app: mpi-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

tests/mxnet-job-mxnet-operator-base_test.go

@@ -103,6 +103,8 @@ spec:
     metadata:
       labels:
         name: mxnet-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/mxnet-job-mxnet-operator-overlays-application_test.go

@@ -158,6 +158,8 @@ spec:
     metadata:
       labels:
         name: mxnet-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/pipeline-api-service-base_test.go

@@ -48,6 +48,9 @@ metadata:
   name: ml-pipeline
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-api-server
@@ -59,9 +62,9 @@ spec:
         image: gcr.io/ml-pipeline/api-server
         imagePullPolicy: IfNotPresent
         command:
-          - apiserver 
+          - apiserver
           - --config=/etc/ml-pipeline-config
-          - --sampleconfig=/config/sample_config.json 
+          - --sampleconfig=/config/sample_config.json
           - -logtostderr=true
         ports:
         - containerPort: 8888
@@ -69,7 +72,7 @@ spec:
         volumeMounts:
         - name: config-volume
           mountPath: /etc/ml-pipeline-config
-      serviceAccountName: ml-pipeline      
+      serviceAccountName: ml-pipeline
       volumes:
         - name: config-volume
           configMap:

tests/pipeline-api-service-overlays-application_test.go

@@ -96,6 +96,9 @@ metadata:
   name: ml-pipeline
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-api-server
@@ -107,9 +110,9 @@ spec:
         image: gcr.io/ml-pipeline/api-server
         imagePullPolicy: IfNotPresent
         command:
-          - apiserver 
+          - apiserver
           - --config=/etc/ml-pipeline-config
-          - --sampleconfig=/config/sample_config.json 
+          - --sampleconfig=/config/sample_config.json
           - -logtostderr=true
         ports:
         - containerPort: 8888
@@ -117,7 +120,7 @@ spec:
         volumeMounts:
         - name: config-volume
           mountPath: /etc/ml-pipeline-config
-      serviceAccountName: ml-pipeline      
+      serviceAccountName: ml-pipeline
       volumes:
         - name: config-volume
           configMap:

tests/pipeline-minio-base_test.go

@@ -23,6 +23,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: minio

tests/pipeline-minio-overlays-application_test.go

@@ -71,6 +71,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: minio

tests/pipeline-minio-overlays-minioPd_test.go

@@ -93,6 +93,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: minio

tests/pipeline-mysql-base_test.go

@@ -23,6 +23,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: mysql

tests/pipeline-mysql-overlays-application_test.go

@@ -71,6 +71,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: mysql

tests/pipeline-mysql-overlays-mysqlPd_test.go

@@ -94,6 +94,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: mysql

tests/pipeline-persistent-agent-base_test.go

@@ -57,6 +57,9 @@ metadata:
   name: persistenceagent
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-persistenceagent

tests/pipeline-persistent-agent-overlays-application_test.go

@@ -105,6 +105,9 @@ metadata:
   name: persistenceagent
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-persistenceagent

tests/pipeline-pipeline-visualization-service-base_test.go

@@ -29,6 +29,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-visualizationserver
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/ml-pipeline/visualization-server

tests/pipeline-pipeline-visualization-service-overlays-application_test.go

@@ -77,6 +77,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-visualizationserver
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/ml-pipeline/visualization-server

tests/pipeline-pipelines-ui-base_test.go

@@ -29,6 +29,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-ui

tests/pipeline-pipelines-ui-overlays-application_test.go

@@ -77,6 +77,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-ui

tests/pipeline-pipelines-ui-overlays-gcp_test.go

@@ -21,6 +21,9 @@ metadata:
   name: ml-pipeline-ui
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: gcp-sa-token
@@ -59,6 +62,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-ui

tests/pipeline-pipelines-ui-overlays-istio_test.go

@@ -89,6 +89,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-ui

tests/pipeline-pipelines-viewer-base_test.go

@@ -142,6 +142,9 @@ metadata:
   name: controller-deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

tests/pipeline-pipelines-viewer-overlays-application_test.go

@@ -190,6 +190,9 @@ metadata:
   name: controller-deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

tests/pipeline-scheduledworkflow-base_test.go

@@ -98,6 +98,9 @@ metadata:
   name: ml-pipeline-scheduledworkflow
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-scheduledworkflow

tests/pipeline-scheduledworkflow-overlays-application_test.go

@@ -146,6 +146,9 @@ metadata:
   name: ml-pipeline-scheduledworkflow
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-scheduledworkflow

tests/profiles-base_test.go

@@ -198,6 +198,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/profiles-overlays-application_test.go

@@ -260,6 +260,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/profiles-overlays-debug_test.go

@@ -257,6 +257,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/profiles-overlays-devices_test.go

@@ -224,6 +224,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/profiles-overlays-istio_test.go

@@ -239,6 +239,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/profiles-overlays-test_test.go

@@ -206,6 +206,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/pytorch-job-pytorch-operator-base_test.go

@@ -131,6 +131,8 @@ spec:
     metadata:
       labels:
         name: pytorch-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/pytorch-job-pytorch-operator-overlays-application_test.go

@@ -192,6 +192,8 @@ spec:
     metadata:
       labels:
         name: pytorch-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

tests/spark-spark-operator-base_test.go

@@ -153,6 +153,7 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
         prometheus.io/scrape: "true"
+        sidecar.istio.io/inject: "false"
       initializers:
         pending: []
       labels:

tests/spark-spark-operator-overlays-application_test.go

@@ -207,6 +207,7 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
         prometheus.io/scrape: "true"
+        sidecar.istio.io/inject: "false"
       initializers:
         pending: []
       labels: