Debugging

Signed-off-by: biswajit-9776 <biswajitpatt139@gmail.com>
biswajit-9776 · Sep 15, 2024 · 86c372c · 86c372c
1 parent d6ebc3f
commit 86c372c
Show file tree

Hide file tree

Showing 14 changed files with 16 additions and 80 deletions.
diff --git a/.github/workflows/pss_test.yaml b/.github/workflows/pss_test.yaml
@@ -31,8 +31,8 @@ jobs:
       run: |
         kustomize build common/kubeflow-namespace/base | kubectl apply -f -
         ./tests/gh-actions/install_cert_manager.sh
-        ./tests/gh-actions/install_istio_with_ext_auth.sh
-        kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
+        ./tests/gh-actions/install_istio-cni.sh
+        kustomize build common/istio-cni-1-22/kubeflow-istio-resources/base | kubectl apply -f -
         ./tests/gh-actions/install_multi_tenancy.sh
         kustomize build ./common/oauth2-proxy/overlays/m2m-self-signed | kubectl apply -f -
         echo "Waiting for all oauth2-proxy pods to become ready..."

diff --git a/contrib/security/PSS/patches/cache-server.yaml b/contrib/security/PSS/patches/cache-server.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/kfam.yaml b/contrib/security/PSS/patches/kfam.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/metadata-grpc-deployment.yaml b/contrib/security/PSS/patches/metadata-grpc-deployment.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/metadata-writer.yaml b/contrib/security/PSS/patches/metadata-writer.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/minio.yaml b/contrib/security/PSS/patches/minio.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/ml-pipeline-persistenceagent.yaml b/contrib/security/PSS/patches/ml-pipeline-persistenceagent.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/ml-pipeline-scheduledworkflow.yaml b/contrib/security/PSS/patches/ml-pipeline-scheduledworkflow.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/ml-pipeline-ui.yaml b/contrib/security/PSS/patches/ml-pipeline-ui.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/ml-pipeline-viewer-crd.yaml b/contrib/security/PSS/patches/ml-pipeline-viewer-crd.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/ml-pipeline-visualizationserver.yaml b/contrib/security/PSS/patches/ml-pipeline-visualizationserver.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/ml-pipeline.yaml b/contrib/security/PSS/patches/ml-pipeline.yaml
@@ -18,13 +18,9 @@ spec:
           capabilities:
             drop:
             - ALL
+      initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/mysql.yaml b/contrib/security/PSS/patches/mysql.yaml
@@ -20,12 +20,7 @@ spec:
             - ALL
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true
diff --git a/contrib/security/PSS/patches/workflow-controller.yaml b/contrib/security/PSS/patches/workflow-controller.yaml
@@ -14,12 +14,7 @@ spec:
           runAsNonRoot: true
       initContainers:
       - image: docker.io/istio/proxyv2:1.22.1
-        name: istio-init
+        name: istio-validation
         securityContext:
-          capabilities:
-            drop:
-            - ALL
           seccompProfile:
             type: RuntimeDefault
-          runAsUser: 1337
-          runAsNonRoot: true