From d5f328c8998bf39d53d03f16ea2a41263ab43724 Mon Sep 17 00:00:00 2001 From: swiftdiaries Date: Tue, 11 Aug 2020 19:18:26 -0700 Subject: [PATCH 1/3] v1.1 manifests for vanilla k8s --- kfdef/kfctl_istio_dex.v1.1.0.yaml | 367 ++++++++++++++++++++++++++++++ kfdef/kfctl_k8s_istio.v1.1.0.yaml | 341 +++++++++++++++++++++++++++ 2 files changed, 708 insertions(+) create mode 100644 kfdef/kfctl_istio_dex.v1.1.0.yaml create mode 100644 kfdef/kfctl_k8s_istio.v1.1.0.yaml diff --git a/kfdef/kfctl_istio_dex.v1.1.0.yaml b/kfdef/kfctl_istio_dex.v1.1.0.yaml new file mode 100644 index 0000000000..c5e4b5bd27 --- /dev/null +++ b/kfdef/kfctl_istio_dex.v1.1.0.yaml @@ -0,0 +1,367 @@ +apiVersion: kfdef.apps.kubeflow.org/v1 +kind: KfDef +metadata: + namespace: kubeflow +spec: + applications: + - kustomizeConfig: + repoRef: + name: manifests + path: application/application-crds + name: application-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: application/application + name: application + - kustomizeConfig: + parameters: + - name: namespace + value: istio-system + repoRef: + name: manifests + path: istio-1-3-1/istio-crds-1-3-1 + name: istio-crds + - kustomizeConfig: + parameters: + - name: namespace + value: istio-system + repoRef: + name: manifests + path: istio-1-3-1/istio-install-1-3-1 + name: istio-install + - kustomizeConfig: + parameters: + - name: namespace + value: istio-system + repoRef: + name: manifests + path: istio-1-3-1/cluster-local-gateway-1-3-1 + name: cluster-local-gateway + - kustomizeConfig: + parameters: + - name: clusterRbacConfig + value: 'ON_WITH_EXCLUSION' + repoRef: + name: manifests + path: istio/istio + name: istio + - kustomizeConfig: + parameters: + - name: namespace + value: cert-manager + repoRef: + name: manifests + path: cert-manager/cert-manager-crds + name: cert-manager-crds + - kustomizeConfig: + parameters: + - name: namespace + value: kube-system + repoRef: + name: manifests + path: cert-manager/cert-manager-kube-system-resources + name: cert-manager-kube-system-resources + - kustomizeConfig: + overlays: + - self-signed + - application + parameters: + - name: namespace + value: cert-manager + repoRef: + name: manifests + path: cert-manager/cert-manager + name: cert-manager + - kustomizeConfig: + overlays: + - application + parameters: + - name: namespace + value: istio-system + - name: userid-header + value: kubeflow-userid + - name: oidc_provider + value: http://dex.auth.svc.cluster.local:5556/dex + - name: oidc_redirect_uri + value: /login/oidc + - name: oidc_auth_url + value: /dex/auth + - name: skip_auth_uri + value: /dex + - name: client_id + value: kubeflow-oidc-authservice + repoRef: + name: manifests + path: istio/oidc-authservice + name: oidc-authservice + - kustomizeConfig: + overlays: + - istio + parameters: + - name: namespace + value: auth + - name: issuer + value: http://dex.auth.svc.cluster.local:5556/dex + - name: client_id + value: kubeflow-oidc-authservice + - name: oidc_redirect_uris + value: '["/login/oidc"]' + - name: static_email + value: admin@kubeflow.org + - name: static_password_hash + value: $2y$12$ruoM7FqXrpVgaol44eRZW.4HWS8SAvg6KYVVSCIwKQPBmTpCm.EeO + repoRef: + name: manifests + path: dex-auth/dex-crds + name: dex + - kustomizeConfig: + overlays: + - istio + - application + repoRef: + name: manifests + path: argo + name: argo + - kustomizeConfig: + repoRef: + name: manifests + path: kubeflow-roles + name: kubeflow-roles + - kustomizeConfig: + overlays: + - istio + - application + parameters: + - name: userid-header + value: kubeflow-userid + repoRef: + name: manifests + path: common/centraldashboard + name: centraldashboard + - kustomizeConfig: + overlays: + - cert-manager + - application + repoRef: + name: manifests + path: admission-webhook/webhook + name: webhook + - kustomizeConfig: + overlays: + - istio + - application + parameters: + - name: userid-header + value: kubeflow-userid + repoRef: + name: manifests + path: jupyter/jupyter-web-app + name: jupyter-web-app + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: spark/spark-operator + name: spark-operator + - kustomizeConfig: + overlays: + - istio + - application + - db + repoRef: + name: manifests + path: metadata + name: metadata + - kustomizeConfig: + overlays: + - istio + - application + repoRef: + name: manifests + path: jupyter/notebook-controller + name: notebook-controller + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pytorch-job/pytorch-job-crds + name: pytorch-job-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pytorch-job/pytorch-operator + name: pytorch-operator + - kustomizeConfig: + overlays: + - application + parameters: + - name: namespace + value: knative-serving + repoRef: + name: manifests + path: knative/knative-serving-crds + name: knative-crds + - kustomizeConfig: + overlays: + - application + parameters: + - name: namespace + value: knative-serving + repoRef: + name: manifests + path: knative/knative-serving-install + name: knative-install + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: kfserving/kfserving-crds + name: kfserving-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: kfserving/kfserving-install + name: kfserving-install + - kustomizeConfig: + overlays: + - application + parameters: + - name: usageId + value: + - name: reportUsage + value: 'true' + repoRef: + name: manifests + path: common/spartakus + name: spartakus + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: tf-training/tf-job-crds + name: tf-job-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: tf-training/tf-job-operator + name: tf-job-operator + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: katib/katib-crds + name: katib-crds + - kustomizeConfig: + overlays: + - application + - istio + repoRef: + name: manifests + path: katib/katib-controller + name: katib-controller + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/api-service + name: api-service + - kustomizeConfig: + overlays: + - application + parameters: + - name: minioPvcName + value: minio-pv-claim + repoRef: + name: manifests + path: pipeline/minio + name: minio + - kustomizeConfig: + overlays: + - application + parameters: + - name: mysqlPvcName + value: mysql-pv-claim + repoRef: + name: manifests + path: pipeline/mysql + name: mysql + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/persistent-agent + name: persistent-agent + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/pipelines-runner + name: pipelines-runner + - kustomizeConfig: + overlays: + - istio + - application + repoRef: + name: manifests + path: pipeline/pipelines-ui + name: pipelines-ui + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/pipelines-viewer + name: pipelines-viewer + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/scheduledworkflow + name: scheduledworkflow + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/pipeline-visualization-service + name: pipeline-visualization-service + - kustomizeConfig: + overlays: + - application + - istio + parameters: + - name: userid-header + value: kubeflow-userid + repoRef: + name: manifests + path: profiles + name: profiles + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: seldon/seldon-core-operator + name: seldon-core-operator + repos: + - name: manifests + uri: https://github.com/kubeflow/manifests/archive/v1.1-branch.tar.gz + version: v1.1-branch diff --git a/kfdef/kfctl_k8s_istio.v1.1.0.yaml b/kfdef/kfctl_k8s_istio.v1.1.0.yaml new file mode 100644 index 0000000000..12cbcb4451 --- /dev/null +++ b/kfdef/kfctl_k8s_istio.v1.1.0.yaml @@ -0,0 +1,341 @@ +apiVersion: kfdef.apps.kubeflow.org/v1 +kind: KfDef +metadata: + namespace: kubeflow +spec: + applications: + - kustomizeConfig: + parameters: + - name: namespace + value: istio-system + repoRef: + name: manifests + path: istio/istio-crds + name: istio-crds + - kustomizeConfig: + parameters: + - name: namespace + value: istio-system + repoRef: + name: manifests + path: istio/istio-install + name: istio-install + - kustomizeConfig: + parameters: + - name: namespace + value: istio-system + repoRef: + name: manifests + path: istio/cluster-local-gateway + name: cluster-local-gateway + - kustomizeConfig: + parameters: + - name: clusterRbacConfig + value: 'OFF' + repoRef: + name: manifests + path: istio/istio + name: istio + - kustomizeConfig: + parameters: + - name: namespace + value: istio-system + repoRef: + name: manifests + path: istio/add-anonymous-user-filter + name: add-anonymous-user-filter + - kustomizeConfig: + repoRef: + name: manifests + path: application/application-crds + name: application-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: application/application + name: application + - kustomizeConfig: + parameters: + - name: namespace + value: cert-manager + repoRef: + name: manifests + path: cert-manager/cert-manager-crds + name: cert-manager-crds + - kustomizeConfig: + parameters: + - name: namespace + value: kube-system + repoRef: + name: manifests + path: cert-manager/cert-manager-kube-system-resources + name: cert-manager-kube-system-resources + - kustomizeConfig: + overlays: + - self-signed + - application + parameters: + - name: namespace + value: cert-manager + repoRef: + name: manifests + path: cert-manager/cert-manager + name: cert-manager + - kustomizeConfig: + repoRef: + name: manifests + path: metacontroller + name: metacontroller + - kustomizeConfig: + overlays: + - istio + - application + repoRef: + name: manifests + path: argo + name: argo + - kustomizeConfig: + repoRef: + name: manifests + path: kubeflow-roles + name: kubeflow-roles + - kustomizeConfig: + overlays: + - istio + - application + repoRef: + name: manifests + path: common/centraldashboard + name: centraldashboard + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: admission-webhook/bootstrap + name: bootstrap + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: admission-webhook/webhook + name: webhook + - kustomizeConfig: + overlays: + - istio + - application + parameters: + - name: userid-header + value: kubeflow-userid + repoRef: + name: manifests + path: jupyter/jupyter-web-app + name: jupyter-web-app + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: spark/spark-operator + name: spark-operator + - kustomizeConfig: + overlays: + - istio + - application + - db + repoRef: + name: manifests + path: metadata + name: metadata + - kustomizeConfig: + overlays: + - istio + - application + repoRef: + name: manifests + path: jupyter/notebook-controller + name: notebook-controller + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pytorch-job/pytorch-job-crds + name: pytorch-job-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pytorch-job/pytorch-operator + name: pytorch-operator + - kustomizeConfig: + overlays: + - application + parameters: + - name: namespace + value: knative-serving + repoRef: + name: manifests + path: knative/knative-serving-crds + name: knative-crds + - kustomizeConfig: + overlays: + - application + parameters: + - name: namespace + value: knative-serving + repoRef: + name: manifests + path: knative/knative-serving-install + name: knative-install + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: kfserving/kfserving-crds + name: kfserving-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: kfserving/kfserving-install + name: kfserving-install + - kustomizeConfig: + overlays: + - application + parameters: + - name: usageId + value: + - name: reportUsage + value: 'true' + repoRef: + name: manifests + path: common/spartakus + name: spartakus + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: tf-training/tf-job-crds + name: tf-job-crds + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: tf-training/tf-job-operator + name: tf-job-operator + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: katib/katib-crds + name: katib-crds + - kustomizeConfig: + overlays: + - application + - istio + repoRef: + name: manifests + path: katib/katib-controller + name: katib-controller + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/api-service + name: api-service + - kustomizeConfig: + overlays: + - application + parameters: + - name: minioPvcName + value: minio-pv-claim + repoRef: + name: manifests + path: pipeline/minio + name: minio + - kustomizeConfig: + overlays: + - application + parameters: + - name: mysqlPvcName + value: mysql-pv-claim + repoRef: + name: manifests + path: pipeline/mysql + name: mysql + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/persistent-agent + name: persistent-agent + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/pipelines-runner + name: pipelines-runner + - kustomizeConfig: + overlays: + - istio + - application + repoRef: + name: manifests + path: pipeline/pipelines-ui + name: pipelines-ui + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/pipelines-viewer + name: pipelines-viewer + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/scheduledworkflow + name: scheduledworkflow + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: pipeline/pipeline-visualization-service + name: pipeline-visualization-service + - kustomizeConfig: + overlays: + - application + - istio + parameters: + - name: admin + value: johnDoe@acme.com + repoRef: + name: manifests + path: profiles + name: profiles + - kustomizeConfig: + overlays: + - application + repoRef: + name: manifests + path: seldon/seldon-core-operator + name: seldon-core-operator + repos: + - name: manifests + uri: https://github.com/kubeflow/manifests/archive/v1.1-branch.tar.gz + version: v1.1-branch \ No newline at end of file From b4e5e6a100780af05df73ffd76b6cbba2ed49ed3 Mon Sep 17 00:00:00 2001 From: swiftdiaries Date: Mon, 17 Aug 2020 12:00:46 -0700 Subject: [PATCH 2/3] adds k8s_istio v3 kfdef --- kfdef/kfctl_k8s_istio.v1.1.0.yaml | 306 ++---------------- .../kustomization.yaml | 5 + 2 files changed, 36 insertions(+), 275 deletions(-) create mode 100644 stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml diff --git a/kfdef/kfctl_k8s_istio.v1.1.0.yaml b/kfdef/kfctl_k8s_istio.v1.1.0.yaml index 12cbcb4451..df9b3cfdfd 100644 --- a/kfdef/kfctl_k8s_istio.v1.1.0.yaml +++ b/kfdef/kfctl_k8s_istio.v1.1.0.yaml @@ -5,337 +5,93 @@ metadata: spec: applications: - kustomizeConfig: - parameters: - - name: namespace - value: istio-system repoRef: name: manifests - path: istio/istio-crds - name: istio-crds + path: namespaces/base + name: namespaces - kustomizeConfig: - parameters: - - name: namespace - value: istio-system repoRef: name: manifests - path: istio/istio-install - name: istio-install - - kustomizeConfig: - parameters: - - name: namespace - value: istio-system - repoRef: - name: manifests - path: istio/cluster-local-gateway - name: cluster-local-gateway - - kustomizeConfig: - parameters: - - name: clusterRbacConfig - value: 'OFF' - repoRef: - name: manifests - path: istio/istio - name: istio + path: application/v3 + name: application - kustomizeConfig: - parameters: - - name: namespace - value: istio-system repoRef: name: manifests - path: istio/add-anonymous-user-filter - name: add-anonymous-user-filter + path: stacks/kubernetes/application/istio-1-3-1-stack + name: istio-stack - kustomizeConfig: repoRef: name: manifests - path: application/application-crds - name: application-crds + path: stacks/kubernetes/application/cluster-local-gateway-1-3-1 + name: cluster-local-gateway - kustomizeConfig: - overlays: - - application repoRef: name: manifests - path: application/application - name: application + path: istio/istio/base + name: istio - kustomizeConfig: - parameters: - - name: namespace - value: cert-manager repoRef: name: manifests - path: cert-manager/cert-manager-crds + path: stacks/kubernetes/application/cert-manager-crds name: cert-manager-crds - kustomizeConfig: - parameters: - - name: namespace - value: kube-system repoRef: name: manifests - path: cert-manager/cert-manager-kube-system-resources + path: stacks/kubernetes/application/cert-manager-kube-system-resources name: cert-manager-kube-system-resources - kustomizeConfig: - overlays: - - self-signed - - application - parameters: - - name: namespace - value: cert-manager repoRef: name: manifests - path: cert-manager/cert-manager + path: stacks/kubernetes/application/cert-manager name: cert-manager - kustomizeConfig: repoRef: name: manifests - path: metacontroller - name: metacontroller - - kustomizeConfig: - overlays: - - istio - - application - repoRef: - name: manifests - path: argo - name: argo - - kustomizeConfig: - repoRef: - name: manifests - path: kubeflow-roles - name: kubeflow-roles + path: stacks/kubernetes/application/add-anonymous-user-filter + name: add-anonymous-user-filter - kustomizeConfig: - overlays: - - istio - - application repoRef: name: manifests - path: common/centraldashboard - name: centraldashboard + path: metacontroller/base + name: metacontroller - kustomizeConfig: - overlays: - - application repoRef: name: manifests - path: admission-webhook/bootstrap + path: admission-webhook/bootstrap/overlays/application name: bootstrap - kustomizeConfig: - overlays: - - application repoRef: name: manifests - path: admission-webhook/webhook - name: webhook - - kustomizeConfig: - overlays: - - istio - - application - parameters: - - name: userid-header - value: kubeflow-userid - repoRef: - name: manifests - path: jupyter/jupyter-web-app - name: jupyter-web-app - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: spark/spark-operator + path: stacks/kubernetes/application/spark-operator name: spark-operator - kustomizeConfig: - overlays: - - istio - - application - - db - repoRef: - name: manifests - path: metadata - name: metadata - - kustomizeConfig: - overlays: - - istio - - application - repoRef: - name: manifests - path: jupyter/notebook-controller - name: notebook-controller - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pytorch-job/pytorch-job-crds - name: pytorch-job-crds - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pytorch-job/pytorch-operator - name: pytorch-operator - - kustomizeConfig: - overlays: - - application - parameters: - - name: namespace - value: knative-serving - repoRef: - name: manifests - path: knative/knative-serving-crds - name: knative-crds - - kustomizeConfig: - overlays: - - application - parameters: - - name: namespace - value: knative-serving repoRef: name: manifests - path: knative/knative-serving-install - name: knative-install + path: stacks/kubernetes + name: kubeflow-apps - kustomizeConfig: - overlays: - - application repoRef: name: manifests - path: kfserving/kfserving-crds - name: kfserving-crds + path: knative/installs/generic + name: knative - kustomizeConfig: - overlays: - - application repoRef: name: manifests - path: kfserving/kfserving-install - name: kfserving-install + path: kfserving/installs/generic + name: kfserving + # Spartakus is a separate applications so that kfctl can remove it + # to disable usage reporting - kustomizeConfig: - overlays: - - application - parameters: - - name: usageId - value: - - name: reportUsage - value: 'true' repoRef: name: manifests - path: common/spartakus + path: stacks/kubernetes/application/spartakus name: spartakus - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: tf-training/tf-job-crds - name: tf-job-crds - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: tf-training/tf-job-operator - name: tf-job-operator - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: katib/katib-crds - name: katib-crds - - kustomizeConfig: - overlays: - - application - - istio - repoRef: - name: manifests - path: katib/katib-controller - name: katib-controller - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pipeline/api-service - name: api-service - - kustomizeConfig: - overlays: - - application - parameters: - - name: minioPvcName - value: minio-pv-claim - repoRef: - name: manifests - path: pipeline/minio - name: minio - - kustomizeConfig: - overlays: - - application - parameters: - - name: mysqlPvcName - value: mysql-pv-claim - repoRef: - name: manifests - path: pipeline/mysql - name: mysql - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pipeline/persistent-agent - name: persistent-agent - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pipeline/pipelines-runner - name: pipelines-runner - - kustomizeConfig: - overlays: - - istio - - application - repoRef: - name: manifests - path: pipeline/pipelines-ui - name: pipelines-ui - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pipeline/pipelines-viewer - name: pipelines-viewer - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pipeline/scheduledworkflow - name: scheduledworkflow - - kustomizeConfig: - overlays: - - application - repoRef: - name: manifests - path: pipeline/pipeline-visualization-service - name: pipeline-visualization-service - - kustomizeConfig: - overlays: - - application - - istio - parameters: - - name: admin - value: johnDoe@acme.com - repoRef: - name: manifests - path: profiles - name: profiles - - kustomizeConfig: - overlays: - - application repoRef: name: manifests - path: seldon/seldon-core-operator - name: seldon-core-operator + path: stacks/kubernetes/application/tensorboard + name: tensorboard repos: - name: manifests uri: https://github.com/kubeflow/manifests/archive/v1.1-branch.tar.gz - version: v1.1-branch \ No newline at end of file + version: v1.1-branch diff --git a/stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml b/stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml new file mode 100644 index 0000000000..d74ad7981e --- /dev/null +++ b/stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml @@ -0,0 +1,5 @@ +iapiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: istio-system +resources: +- ../../../../istio/add-anonymous-user-filter/base From 3bf974ee93b892d2b7254141af00d820aca04aab Mon Sep 17 00:00:00 2001 From: swiftdiaries Date: Mon, 17 Aug 2020 12:33:23 -0700 Subject: [PATCH 3/3] add tests --- .../kustomization.yaml | 2 +- .../kustomize_test.go | 16 +++++++++++++++ ..._v1alpha3_envoyfilter_add-user-filter.yaml | 20 +++++++++++++++++++ 3 files changed, 37 insertions(+), 1 deletion(-) create mode 100644 tests/stacks/kubernetes/application/add-anonymous-user-filter/kustomize_test.go create mode 100644 tests/stacks/kubernetes/application/add-anonymous-user-filter/test_data/expected/networking.istio.io_v1alpha3_envoyfilter_add-user-filter.yaml diff --git a/stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml b/stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml index d74ad7981e..3a282e21d3 100644 --- a/stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml +++ b/stacks/kubernetes/application/add-anonymous-user-filter/kustomization.yaml @@ -1,4 +1,4 @@ -iapiVersion: kustomize.config.k8s.io/v1beta1 +apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: istio-system resources: diff --git a/tests/stacks/kubernetes/application/add-anonymous-user-filter/kustomize_test.go b/tests/stacks/kubernetes/application/add-anonymous-user-filter/kustomize_test.go new file mode 100644 index 0000000000..8c8027183c --- /dev/null +++ b/tests/stacks/kubernetes/application/add-anonymous-user-filter/kustomize_test.go @@ -0,0 +1,16 @@ +package add_anonymous_user_filter + +import ( + "testing" + + "github.com/kubeflow/manifests/tests" +) + +func TestKustomize(t *testing.T) { + testCase := &tests.KustomizeTestCase{ + Package: "../../../../../stacks/kubernetes/application/add-anonymous-user-filter", + Expected: "test_data/expected", + } + + tests.RunTestCase(t, testCase) +} diff --git a/tests/stacks/kubernetes/application/add-anonymous-user-filter/test_data/expected/networking.istio.io_v1alpha3_envoyfilter_add-user-filter.yaml b/tests/stacks/kubernetes/application/add-anonymous-user-filter/test_data/expected/networking.istio.io_v1alpha3_envoyfilter_add-user-filter.yaml new file mode 100644 index 0000000000..2dc41b3220 --- /dev/null +++ b/tests/stacks/kubernetes/application/add-anonymous-user-filter/test_data/expected/networking.istio.io_v1alpha3_envoyfilter_add-user-filter.yaml @@ -0,0 +1,20 @@ +apiVersion: networking.istio.io/v1alpha3 +kind: EnvoyFilter +metadata: + name: add-user-filter + namespace: istio-system +spec: + filters: + - filterConfig: + inlineCode: | + function envoy_on_request(request_handle) + request_handle:headers():add("kubeflow-userid","anonymous@kubeflow.org") + end + filterName: envoy.lua + filterType: HTTP + insertPosition: + index: FIRST + listenerMatch: + listenerType: GATEWAY + workloadLabels: + app: istio-ingressgateway