Merge pull request #961 from Vafilor/feat/remove.community.restrictions

fix: remove namespace creation restriction

db/yaml/workspaces/cvat_1_6_0/20211028205201.yaml

@@ -1,5 +1,5 @@
 metadata:
- name: CVAT
+ name: CVAT_1.6.0
  kind: Workspace
  version: 20211028205201
  action: create

manifest/abs/deployment.json

@@ -0,0 +1,63 @@
+{
+ "apiVersion": "apps/v1",
+ "kind": "Deployment",
+ "metadata": {
+ "name": "minio-gateway",
+ "namespace": "$(applicationDefaultNamespace)"
+ },
+ "spec": {
+ "replicas": 1,
+ "selector": {
+ "matchLabels": {
+ "app": "minio-gateway"
+ }
+ },
+ "template": {
+ "metadata": {
+ "labels": {
+ "app": "minio-gateway"
+ },
+ "annotations": {
+ "sidecar.istio.io/inject": "false"
+ }
+ },
+ "spec": {
+ "containers": [
+ {
+ "name": "minio-gateway",
+ "image": "minio/minio:RELEASE.2021-06-17T00-10-46Z.hotfix.49f6035b1",
+ "args": [
+ "gateway",
+ "azure"
+ ],
+ "env": [
+ {
+ "name": "MINIO_ACCESS_KEY",
+ "valueFrom": {
+ "secretKeyRef": {
+ "name": "onepanel",
+ "key": "artifactRepositoryS3AccessKey"
+ }
+ }
+ },
+ {
+ "name": "MINIO_SECRET_KEY",
+ "valueFrom": {
+ "secretKeyRef": {
+ "name": "onepanel",
+ "key": "artifactRepositoryS3SecretKey"
+ }
+ }
+ }
+ ],
+ "ports": [
+ {
+ "containerPort": 9000
+ }
+ ]
+ }
+ ]
+ }
+ }
+ }
+}

manifest/abs/service.json

@@ -0,0 +1,19 @@
+{
+ "apiVersion": "v1",
+ "kind": "Service",
+ "metadata": {
+ "name": "minio-gateway",
+ "namespace": "$(applicationDefaultNamespace)"
+ },
+ "spec": {
+ "selector": {
+ "app": "minio-gateway"
+ },
+ "ports": [
+ {
+ "port": 9000,
+ "targetPort": 9000
+ }
+ ]
+ }
+}

manifest/clusterrolebinding-models.json

@@ -0,0 +1,19 @@
+{
+ "apiVersion": "rbac.authorization.k8s.io/v1",
+ "kind": "ClusterRoleBinding",
+ "metadata": {
+ "name": "onepanel-kfserving-$(applicationDefaultNamespace)"
+ },
+ "subjects": [
+ {
+ "kind": "ServiceAccount",
+ "name": "$(applicationDefaultNamespace)",
+ "namespace": "$(applicationDefaultNamespace)"
+ }
+ ],
+ "roleRef": {
+ "apiGroup": "rbac.authorization.k8s.io",
+ "kind": "ClusterRole",
+ "name": "onepanel-models"
+ }
+}

manifest/clusterrolebinding-onepanel-namespaces-defaultnamespace.json

@@ -0,0 +1,22 @@
+{
+ "apiVersion": "rbac.authorization.k8s.io/v1beta1",
+ "kind": "ClusterRoleBinding",
+ "metadata": {
+ "labels": {
+ "app": "onepanel"
+ },
+ "name": "onepanel-namespaces"
+ },
+ "roleRef": {
+ "apiGroup": "rbac.authorization.k8s.io",
+ "kind": "ClusterRole",
+ "name": "onepanel-namespaces"
+ },
+ "subjects": [
+ {
+ "kind": "ServiceAccount",
+ "name": "$(applicationDefaultNamespace)",
+ "namespace": "$(applicationDefaultNamespace)"
+ }
+ ]
+}

manifest/configmap-onepanel-defaultnamespace.json

@@ -0,0 +1,11 @@
+{
+ "apiVersion": "v1",
+ "kind": "ConfigMap",
+ "metadata": {
+ "name": "onepanel",
+ "namespace": "$(applicationDefaultNamespace)"
+ },
+ "data": {
+ "artifactRepository": "archiveLogs: true\n$(artifactRepositoryProvider)\n"
+ }
+}

manifest/gcs/deployment.json

@@ -0,0 +1,83 @@
+{
+ "apiVersion": "apps/v1",
+ "kind": "Deployment",
+ "metadata": {
+ "name": "minio-gateway",
+ "namespace": "$(applicationDefaultNamespace)"
+ },
+ "spec": {
+ "replicas": 1,
+ "selector": {
+ "matchLabels": {
+ "app": "minio-gateway"
+ }
+ },
+ "template": {
+ "metadata": {
+ "labels": {
+ "app": "minio-gateway"
+ },
+ "annotations": {
+ "sidecar.istio.io/inject": "false"
+ }
+ },
+ "spec": {
+ "containers": [
+ {
+ "name": "minio-gateway",
+ "image": "minio/minio:RELEASE.2021-06-17T00-10-46Z.hotfix.49f6035b1",
+ "volumeMounts": [
+ {
+ "name": "gcs-credentials",
+ "mountPath": "/etc/gcs",
+ "readOnly": true
+ }
+ ],
+ "args": [
+ "gateway",
+ "gcs"
+ ],
+ "env": [
+ {
+ "name": "MINIO_ACCESS_KEY",
+ "valueFrom": {
+ "secretKeyRef": {
+ "name": "onepanel",
+ "key": "artifactRepositoryS3AccessKey"
+ }
+ }
+ },
+ {
+ "name": "MINIO_SECRET_KEY",
+ "valueFrom": {
+ "secretKeyRef": {
+ "name": "onepanel",
+ "key": "artifactRepositoryS3SecretKey"
+ }
+ }
+ },
+ {
+ "name": "GOOGLE_APPLICATION_CREDENTIALS",
+ "value": "/etc/gcs/credentials.json"
+ }
+ ]
+ }
+ ],
+ "volumes": [
+ {
+ "name": "gcs-credentials",
+ "projected": {
+ "sources": [
+ {
+ "secret": {
+ "name": "artifact-repository-gcs-credentials"
+ }
+ }
+ ]
+ }
+ }
+ ]
+ }
+ }
+ }
+}

manifest/gcs/service.json

@@ -0,0 +1,19 @@
+{
+ "apiVersion": "v1",
+ "kind": "Service",
+ "metadata": {
+ "name": "minio-gateway",
+ "namespace": "$(applicationDefaultNamespace)"
+ },
+ "spec": {
+ "selector": {
+ "app": "minio-gateway"
+ },
+ "ports": [
+ {
+ "port": 9000,
+ "targetPort": 9000
+ }
+ ]
+ }
+}

manifest/kfserving/secret.json

@@ -0,0 +1,19 @@
+{
+ "apiVersion": "v1",
+ "kind": "Secret",
+ "metadata": {
+ "name": "kfserving-storage",
+ "namespace": "$(applicationDefaultNamespace)",
+ "annotations": {
+ "serving.kubeflow.org/s3-endpoint": "$(artifactRepositoryS3Endpoint)",
+ "serving.kubeflow.org/s3-usehttps": "0",
+ "serving.kubeflow.org/s3-region": "$(artifactRepositoryS3Region)",
+ "serving.kubeflow.org/s3-useanoncredential": "false"
+ }
+ },
+ "type": "Opaque",
+ "data": {
+ "AWS_ACCESS_KEY_ID": "$(artifactRepositoryS3AccessKey)",
+ "AWS_SECRET_ACCESS_KEY": "$(artifactRepositoryS3SecretKey)"
+ }
+}

manifest/networkpolicy-onepanel-defaultnamespace.json

@@ -0,0 +1,41 @@
+{
+ "apiVersion": "networking.k8s.io/v1",
+ "kind": "NetworkPolicy",
+ "metadata": {
+ "labels": {
+ "app": "onepanel"
+ },
+ "name": "onepanel",
+ "namespace": "$(applicationDefaultNamespace)"
+ },
+ "spec": {
+ "egress": [
+ {
+ "to": [
+ {
+ "ipBlock": {
+ "cidr": "0.0.0.0/0",
+ "except": [
+ "169.254.169.254/32"
+ ]
+ }
+ }
+ ]
+ }
+ ],
+ "ingress": [
+ {
+ "from": [
+ {
+ "namespaceSelector": {
+ "matchLabels": {
+ "app.kubernetes.io/part-of": "onepanel"
+ }
+ }
+ }
+ ]
+ }
+ ],
+ "podSelector": {}
+ }
+}