* chore(mlmd): Upgrade ML Metadata to 1.14.0.
* fix requirements, skip visualization.
* go mod tidy
* mlmd new enum in frontend
* mlmd license
* mlmd license again, using the failure test diff
* again
* add option to deploy mysql
* fix deployment errors
* remove temp code in development
* keep mysql deployment path same as before
* change the generic folder
* manifest error
* revert default cache path
* address comments
* Enable auth between pesistence agent and pipelineAPI (ReportServer)
1. Add authentication and authorization logic to PipelineAPI's PeportServer &
2. Make Persistence Agent authenticate itself through Service Account Token
Volume Projection.
Signed-off-by: diana <difince@gmail.com>
* Do not use MULTIUSER on report weorkflows
Only Persistent agent can KFPipeline API "Report (Scheduled)Workflows" no matter
the namespace workflows belongs to.
Signed-off-by: diana <difince@gmail.com>
* Add unit tests
- unit tests added
- do not stop the ticker on stopCh
Signed-off-by: diana <difince@gmail.com>
---------
Signed-off-by: diana <difince@gmail.com>
Updated the env variable from MINIO_NAMESPACE to NAMESPACE as in `backend/Dockerfile.viewercontroller`. This fixes an error that happens when you use a custom namespace instead of the default kubeflow, and the ml-pipeline-viewer-crd deployment goes into CrashLoopBackOff.
* Make cache-server webhook port number configurable
Previously the webhook listened on a fixed port, 8443, which can clash
with other services when the webhook is run on the host network in
Kubernetes, which is required when using some CNI implementations,
notably Calico on EKS [1].
Enable configuration of the webhook listen port via the program flags.
[1] https://projectcalico.docs.tigera.io/getting-started/kubernetes/managed-public-cloud/eks#install-eks-with-calico-networking
Signed-off-by: Steve Larkin <steve.larkin@gmail.com>
* fixup! Make cache-server webhook port number configurable
Signed-off-by: Steve Larkin <steve.larkin@gmail.com>
* fixup! fixup! Make cache-server webhook port number configurable
Signed-off-by: Steve Larkin <steve.larkin@gmail.com>
Signed-off-by: Steve Larkin <steve.larkin@gmail.com>
* Fix partner_id in GCP Marketplace application
Replacing `partner_id` with the appropriate value.
This change should be included in the next v1 and v2 releases.
* Allow multiple yamls in a document for pre-commit hook
* Rebuild snapshots
* Rebuild snapshots
* Tidy snapshots
* Tidy snapshots
* Upgrade mysql to 8.0-debian
* Downgrade to mysql-8.0.26 to fix mlmd authentication issue
* Fix cloudbuilds
* Fix gcp marketplace manifests
* Cleaning up mysql password from yaml
* Improve comments
* Authorize readArtifacts and ReportMetrics endpoints
New Verbs (reportMetrics and readArtifact) are added to ClusterRole with name: aggregate-to-kubeflow-pipelines-edit
Signed-off-by: Diana Atanasova <dianaa@vmware.com>
* Add authorization when Persistent Agent communicate with the api-server
Persistent Agent authorize itself based ot the namespace and the current user
Fixes: #7818
* Update persistence_agent.csv license file
Signed-off-by: Diana Atanasova <dianaa@vmware.com>
* Fix lexical error in persistent agent cluster role
Signed-off-by: Diana Atanasova <dianaa@vmware.com>
* Fix integration tests/Fix MULTIUSER= false usecase
Cover MULTIUSER=false usecase/Standalone pipeline installation.
In this case the namespace doesn't have `user` annotation and
there is no need to provide `kubeflow-userid` Header when making
a request against kfp-api-server
Signed-off-by: Diana Atanasova <dianaa@vmware.com>
* rebase: fix conflixt in license file
Signed-off-by: Diana Atanasova <dianaa@vmware.com>
* rebase add new line in the end of licensing file
Signed-off-by: Diana Atanasova <dianaa@vmware.com>
Dharmit Dalvi
Chen Sun
Diana Atanasova
James Liu
Lingqing Gan
Diana Atanasova
Joe Li
gkcalat
Mark Gee
Ablai Akhazhanov
Alex
Steve Larkin
juliusvonkohout
Suraj Kota