katib/manifests/v1beta1/installs/katib-with-kubeflow/patches/ui-rbac.yaml at master

mirror of https://github.com/hanzo-ml/katib.git synced 2026-10-30 14:46:14 +00:00

Files

T

apogerandGitHub 6e1ea05fe3 Update manifests to enable authorization check mechanisms for katib-UI in kubeflow mode (#2041 )

* Upgrade manifests to enable authorization check mechanisms for katib-UI

Changes to install-with-kubeflow manifests:

* Enable istio sidecar injection for katib-ui component

* Add AuthorizationPolicy to allow only istio-ingressgateway
  to talk to katib-ui [user traffic].

* Set APP_DISABLE_AUTH ENV var to false when in kubeflow-mode
  to enable authorization checks in UI's backend

* Extend the RBAC persmissions of katib-ui so it can crate SAR objects
  when in kubeflow-mode

Signed-off-by: Apostolos Gerakaris <[email protected]>

* UI(back): Secure /katib/fetch_trial/ route

Introduce authn/authz checks in the backend

Signed-off-by: Apostolos Gerakaris <[email protected]>

* review: Remove duplicate dependencies

Signed-off-by: Apostolos Gerakaris <[email protected]>

* review: Move patch to a separate file

Signed-off-by: Apostolos Gerakaris <[email protected]>

Signed-off-by: Apostolos Gerakaris <[email protected]>

2023-01-24 16:25:25 +00:00

8 lines

136 B

YAML

Raw Permalink Blame History

 ---
 - op: add
   path: /rules/-
   value:
     apiGroups: [authorization.k8s.io]
     resources: [subjectaccessreviews]
     verbs: [create]

8 lines 136 B YAML Raw Permalink Blame History

8 lines

136 B

YAML

Raw Permalink Blame History