Skip to content

Commit 22faea0

Browse files
authored
Create v1.1.0 Azure Kfdef manifests with OIDC Azure AD (kubeflow#1576)
* Rename rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system:auth-delegator.yaml to rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system-auth-delegator.yaml * intial kdef * indentation * eof * eof * eof * eof * eof * adding istio to azure stack * indentation * update URI * Rename rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system-auth-delegator.yaml to rbac.authorization.k8s.io_v1_clusterrolebinding_custom-metrics:system:auth-delegator.yaml * placeholder for azure ad values
1 parent ef3c833 commit 22faea0

3 files changed

Lines changed: 89 additions & 0 deletions

File tree

kfdef/kfctl_azure_aad.v1.1.0.yaml

Lines changed: 65 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,65 @@
1+
apiVersion: kfdef.apps.kubeflow.org/v1
2+
kind: KfDef
3+
metadata:
4+
namespace: kubeflow
5+
spec:
6+
applications:
7+
- kustomizeConfig:
8+
repoRef:
9+
name: manifests
10+
path: namespaces/base
11+
name: namespaces
12+
- kustomizeConfig:
13+
repoRef:
14+
name: manifests
15+
path: application/v3
16+
name: application
17+
- kustomizeConfig:
18+
repoRef:
19+
name: manifests
20+
path: stacks/azure/application/istio-1-3-1-stack
21+
name: istio-stack
22+
- kustomizeConfig:
23+
repoRef:
24+
name: manifests
25+
path: stacks/kubernetes/application/cluster-local-gateway-1-3-1
26+
name: cluster-local-gateway
27+
- kustomizeConfig:
28+
repoRef:
29+
name: manifests
30+
path: stacks/azure/application/istio
31+
name: istio
32+
- kustomizeConfig:
33+
repoRef:
34+
name: manifests
35+
path: stacks/azure/application/cert-manager-crds
36+
name: cert-manager-crds
37+
- kustomizeConfig:
38+
repoRef:
39+
name: manifests
40+
path: stacks/azure/application/cert-manager-kube-system-resources
41+
name: cert-manager-kube-system-resources
42+
- kustomizeConfig:
43+
repoRef:
44+
name: manifests
45+
path: stacks/azure/application/cert-manager
46+
name: cert-manager
47+
- kustomizeConfig:
48+
repoRef:
49+
name: manifests
50+
path: metacontroller/base
51+
name: metacontroller
52+
- kustomizeConfig:
53+
repoRef:
54+
name: manifests
55+
path: stacks/azure/application/oidc-authservice
56+
name: oidc-authservice
57+
- kustomizeConfig:
58+
repoRef:
59+
name: manifests
60+
path: stacks/azure
61+
name: kubeflow-apps
62+
repos:
63+
- name: manifests
64+
uri: https://github.com/kubeflow/manifests/archive/v1.1-branch.tar.gz
65+
version: v1.1-branch
Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
namespace: istio-system
4+
resources:
5+
- ../../../../istio-1-3-1/istio-crds-1-3-1/base
6+
- ../../../../istio-1-3-1/istio-install-1-3-1/base
Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
apiVersion: kustomize.config.k8s.io/v1beta1
2+
kind: Kustomization
3+
namespace: istio-system
4+
resources:
5+
- ../../../../istio/oidc-authservice/overlays/application
6+
configMapGenerator:
7+
- name: oidc-authservice-parameters
8+
behavior: merge
9+
literals:
10+
- client_id=<client_id>
11+
- oidc_provider=https://login.microsoftonline.com/<tenant_id>/v2.0
12+
- oidc_redirect_uri=https://<load_balancer_ip or domain_name>/login/oidc
13+
- oidc_auth_url=https://login.microsoftonline.com/<tenant_id>/oauth2/v2.0/authorize
14+
- application_secret=<app_secret>
15+
- skip_auth_uri=
16+
- namespace=istio-system
17+
- userid-header=kubeflow-userid
18+
- userid-prefix=

0 commit comments

Comments
 (0)