# This is the config to install Kubeflow on an existing K8s cluster, with support # for multi-user and LDAP auth using Dex. apiVersion: kfdef.apps.kubeflow.org/v1beta1 kind: KfDef metadata: name: demo namespace: kubeflow spec: applications: - kustomizeConfig: repoRef: name: manifests path: application/application-crds name: application-crds - kustomizeConfig: overlays: - application repoRef: name: manifests path: application/application name: application - kustomizeConfig: parameters: - name: namespace value: cert-manager repoRef: name: manifests path: cert-manager/cert-manager-crds name: cert-manager-crds - kustomizeConfig: parameters: - name: namespace value: kube-system repoRef: name: manifests path: cert-manager/cert-manager-kube-system-resources name: cert-manager-kube-system-resources - kustomizeConfig: overlays: - self-signed - application parameters: - name: namespace value: cert-manager repoRef: name: manifests path: cert-manager/cert-manager name: cert-manager # Istio install. If not needed, comment out istio-crds and istio-install. - kustomizeConfig: parameters: - name: namespace value: istio-system repoRef: name: manifests path: istio/istio-crds name: istio-crds - kustomizeConfig: parameters: - name: namespace value: istio-system repoRef: name: manifests path: istio/istio-install name: istio-install # This component is the istio resources for Kubeflow (e.g. gateway), not about installing istio - kustomizeConfig: parameters: - name: clusterRbacConfig value: "ON" repoRef: name: manifests path: istio/istio name: istio - kustomizeConfig: overlays: - application parameters: - name: namespace value: istio-system - name: userid-header value: kubeflow-userid - name: oidc_provider value: http://dex.auth.svc.cluster.local:5556/dex - name: oidc_redirect_uri value: /login/oidc - name: oidc_auth_url value: /dex/auth - name: skip_auth_uri value: /dex - name: client_id value: kubeflow-oidc-authservice repoRef: name: manifests path: istio/oidc-authservice name: oidc-authservice - kustomizeConfig: overlays: - istio parameters: - name: namespace value: auth - name: issuer value: http://dex.auth.svc.cluster.local:5556/dex - name: client_id value: kubeflow-oidc-authservice - name: oidc_redirect_uris value: '["/login/oidc"]' - name: static_email value: admin@kubeflow.org # Password is "12341234", 12-round bcrypt-hashed. - name: static_password_hash value: $2y$12$ruoM7FqXrpVgaol44eRZW.4HWS8SAvg6KYVVSCIwKQPBmTpCm.EeO repoRef: name: manifests path: dex-auth/dex-crds name: dex - kustomizeConfig: overlays: - istio - application repoRef: name: manifests path: argo name: argo - kustomizeConfig: repoRef: name: manifests path: kubeflow-roles name: kubeflow-roles - kustomizeConfig: overlays: - istio - application parameters: - name: userid-header value: kubeflow-userid repoRef: name: manifests path: common/centraldashboard name: centraldashboard - kustomizeConfig: overlays: - cert-manager - application repoRef: name: manifests path: admission-webhook/webhook name: webhook - kustomizeConfig: overlays: - istio - application parameters: - name: userid-header value: kubeflow-userid repoRef: name: manifests path: jupyter/jupyter-web-app name: jupyter-web-app - kustomizeConfig: overlays: - istio repoRef: name: manifests path: metadata name: metadata - kustomizeConfig: overlays: - istio - application repoRef: name: manifests path: jupyter/notebook-controller name: notebook-controller - kustomizeConfig: overlays: - application repoRef: name: manifests path: pytorch-job/pytorch-job-crds name: pytorch-job-crds - kustomizeConfig: overlays: - application repoRef: name: manifests path: pytorch-job/pytorch-operator name: pytorch-operator - kustomizeConfig: overlays: - application parameters: - name: usageId value: - name: reportUsage value: "true" repoRef: name: manifests path: common/spartakus name: spartakus - kustomizeConfig: overlays: - istio repoRef: name: manifests path: tensorboard name: tensorboard - kustomizeConfig: overlays: - application repoRef: name: manifests path: tf-training/tf-job-crds name: tf-job-crds - kustomizeConfig: overlays: - application repoRef: name: manifests path: tf-training/tf-job-operator name: tf-job-operator - kustomizeConfig: repoRef: name: manifests path: katib/katib-crds name: katib-crds - kustomizeConfig: overlays: - application - istio repoRef: name: manifests path: katib/katib-controller name: katib-controller - kustomizeConfig: overlays: - application repoRef: name: manifests path: pipeline/api-service name: api-service - kustomizeConfig: overlays: - application parameters: - name: minioPvcName value: minio-pv-claim repoRef: name: manifests path: pipeline/minio name: minio - kustomizeConfig: overlays: - application parameters: - name: mysqlPvcName value: mysql-pv-claim repoRef: name: manifests path: pipeline/mysql name: mysql - kustomizeConfig: overlays: - application repoRef: name: manifests path: pipeline/persistent-agent name: persistent-agent - kustomizeConfig: overlays: - application repoRef: name: manifests path: pipeline/pipelines-runner name: pipelines-runner - kustomizeConfig: overlays: - istio - application repoRef: name: manifests path: pipeline/pipelines-ui name: pipelines-ui - kustomizeConfig: overlays: - application repoRef: name: manifests path: pipeline/pipelines-viewer name: pipelines-viewer - kustomizeConfig: overlays: - application repoRef: name: manifests path: pipeline/scheduledworkflow name: scheduledworkflow - kustomizeConfig: overlays: - application repoRef: name: manifests path: pipeline/pipeline-visualization-service name: pipeline-visualization-service - kustomizeConfig: overlays: - application - istio parameters: - name: userid-header value: kubeflow-userid repoRef: name: manifests path: profiles name: profiles - kustomizeConfig: overlays: - application repoRef: name: manifests path: seldon/seldon-core-operator name: seldon-core-operator repos: - name: manifests uri: https://github.com/kubeflow/manifests/archive/2b34c263cf5165339f856b50cd759db30c6cae9d.tar.gz