mirror of
https://github.com/hanzo-ml/katib.git
synced 2026-09-24 00:31:27 +00:00
Ayush GuptaandGitHub
1c19d3a6eb
* Fix Istio sidecar injection by moving from annotations to labels Signed-off-by: madmecodes <[email protected]> * Update Istio sidecar injection from annotations to labels across the codebase Replace annotations with labels for Istio sidecar injection according to Istio recommendations. Update conformance tests, examples, constants, composers, and utilities to use the new label-based approach consistently. Signed-off-by: madmecodes <[email protected]> * fix: Update SuggestionLabels function and composer implementation for Istio label injection Signed-off-by: madmecodes <[email protected]> * Fix linting issues in mpi-job-horovod.py Signed-off-by: madmecodes <[email protected]> * update: function moved from annotations to labels Signed-off-by: madmecodes <[email protected]> --------- Signed-off-by: madmecodes <[email protected]>
78 lines
2.1 KiB
YAML
78 lines
2.1 KiB
YAML
---
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: katib-controller
|
|
namespace: kubeflow
|
|
labels:
|
|
katib.kubeflow.org/component: controller
|
|
spec:
|
|
replicas: 1
|
|
selector:
|
|
matchLabels:
|
|
katib.kubeflow.org/component: controller
|
|
template:
|
|
metadata:
|
|
labels:
|
|
katib.kubeflow.org/component: controller
|
|
sidecar.istio.io/inject: "false"
|
|
annotations:
|
|
prometheus.io/scrape: "true"
|
|
prometheus.io/port: "8080"
|
|
spec:
|
|
serviceAccountName: katib-controller
|
|
containers:
|
|
- name: katib-controller
|
|
image: ghcr.io/kubeflow/katib/katib-controller
|
|
command: ["./katib-controller"]
|
|
args:
|
|
- --katib-config=/katib-config.yaml
|
|
ports:
|
|
- containerPort: 8443
|
|
name: webhook
|
|
protocol: TCP
|
|
- containerPort: 8080
|
|
name: metrics
|
|
protocol: TCP
|
|
- containerPort: 18080
|
|
name: healthz
|
|
protocol: TCP
|
|
readinessProbe:
|
|
httpGet:
|
|
path: /readyz
|
|
port: healthz
|
|
livenessProbe:
|
|
httpGet:
|
|
path: /healthz
|
|
port: healthz
|
|
env:
|
|
- name: KATIB_CORE_NAMESPACE
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.namespace
|
|
volumeMounts:
|
|
- mountPath: /tmp/cert
|
|
name: cert
|
|
readOnly: true
|
|
- mountPath: /katib-config.yaml
|
|
name: katib-config
|
|
subPath: katib-config.yaml
|
|
readOnly: true
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
runAsUser: 1000
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
volumes:
|
|
- name: cert
|
|
secret:
|
|
defaultMode: 420
|
|
secretName: katib-webhook-cert
|
|
- name: katib-config
|
|
configMap:
|
|
name: katib-config
|