Automated cherry pick of #1859: Kubeflow Pipelines: Sync manifests (#…

…1862)

Sync manifests for application "Kubeflow Pipelines".
Upstream manifests are copied from:
- Repo: https://github.com/kubeflow/pipelines
- Path: manifests/kustomize
- Revision: 1.5.0

Signed-off-by: Yannis Zarkadas <yanniszark@arrikto.com>

README.md

@@ -56,7 +56,7 @@ This repo periodically syncs all official Kubeflow components from their respect
 | Volumes Web App | apps/volumes-web-app/upstream | [v1.3.0-rc.1](https://github.com/kubeflow/kubeflow/tree/v1.3.0-rc.1/components/crud-web-apps/volumes/manifests) |
 | Katib | apps/katib/upstream | [origin/release-0.11 (7d7c34c72ab8bce74262c7abbe55ef9312291219)](https://github.com/kubeflow/katib/tree/7d7c34c72ab8bce74262c7abbe55ef9312291219/manifests/v1beta1) |
 | KFServing | apps/kfserving/upstream | [origin/release-0.5 (e189a510121c09f764f749143b80f6ee6baaf48b)](https://github.com/kubeflow/kfserving/tree/e189a510121c09f764f749143b80f6ee6baaf48b/config) |
-| Kubeflow Pipelines | apps/pipeline/upstream | [1.5.0-rc.2](https://github.com/kubeflow/pipelines/tree/1.5.0-rc.2/manifests/kustomize) |
+| Kubeflow Pipelines | apps/pipeline/upstream | [1.5.0](https://github.com/kubeflow/pipelines/tree/1.5.0/manifests/kustomize) |
 | Kubeflow Tekton Pipelines | apps/kfp-tekton/upstream | [v0.8.0-rc0](https://github.com/kubeflow/kfp-tekton/tree/v0.8.0-rc0/manifests/kustomize) |
 
 ## Installation

apps/pipeline/upstream/base/cache-deployer/kustomization.yaml

@@ -8,4 +8,4 @@ commonLabels:
   app: cache-deployer
 images:
   - name: gcr.io/ml-pipeline/cache-deployer
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0

apps/pipeline/upstream/base/cache/kustomization.yaml

@@ -10,4 +10,4 @@ commonLabels:
   app: cache-server
 images:
   - name: gcr.io/ml-pipeline/cache-server
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0

apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml

@@ -4,7 +4,7 @@ metadata:
   name: pipeline-install-config
 data:
   appName: pipeline
-  appVersion: 1.5.0-rc.2
+  appVersion: 1.5.0
   dbHost: mysql
   dbPort: "3306"
   mlmdDb: metadb

apps/pipeline/upstream/base/installs/multi-user/istio-authorization-config.yaml

@@ -70,19 +70,6 @@ spec:
   rules:
   - {}
 
----
-apiVersion: security.istio.io/v1beta1
-kind: AuthorizationPolicy
-metadata:
-  name: metadata-grpc-service
-spec:
-  action: ALLOW
-  selector:
-    matchLabels:
-      component: metadata-grpc-server
-  rules:
-  - {}
-
 ---
 apiVersion: "networking.istio.io/v1alpha3"
 kind: DestinationRule

apps/pipeline/upstream/base/installs/multi-user/virtual-service.yaml

@@ -19,27 +19,3 @@ spec:
         port:
           number: 80
     timeout: 300s
-
----
-
-apiVersion: networking.istio.io/v1alpha3
-kind: VirtualService
-metadata:
-  name: metadata-grpc
-  namespace: kubeflow
-spec:
-  gateways:
-  - kubeflow-gateway
-  hosts:
-  - '*'
-  http:
-  - match:
-    - uri:
-        prefix: /ml_metadata
-    rewrite:
-      uri: /ml_metadata
-    route:
-    - destination:
-        host: ml-pipeline-ui.$(kfp-namespace).svc.cluster.local
-        port:
-          number: 80

apps/pipeline/upstream/base/metadata/base/kustomization.yaml

@@ -9,4 +9,4 @@ resources:
   - metadata-grpc-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/metadata-envoy
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0

apps/pipeline/upstream/base/metadata/options/istio/destination-rule.yaml

@@ -0,0 +1,9 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: DestinationRule
+metadata:
+  name: metadata-grpc-service
+spec:
+  host: metadata-grpc-service.kubeflow.svc.cluster.local
+  trafficPolicy:
+    tls:
+      mode: ISTIO_MUTUAL

apps/pipeline/upstream/base/metadata/options/istio/istio-authorization-policy.yaml

@@ -0,0 +1,11 @@
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  name: metadata-grpc-service
+spec:
+  action: ALLOW
+  selector:
+    matchLabels:
+      component: metadata-grpc-server
+  rules:
+  - {}

apps/pipeline/upstream/base/metadata/options/istio/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+- istio-authorization-policy.yaml
+- destination-rule.yaml
+- virtual-service.yaml

apps/pipeline/upstream/base/metadata/options/istio/virtual-service.yaml

@@ -0,0 +1,21 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: metadata-grpc
+  namespace: kubeflow
+spec:
+  gateways:
+  - kubeflow-gateway
+  hosts:
+  - '*'
+  http:
+  - match:
+    - uri:
+        prefix: /ml_metadata
+    rewrite:
+      uri: /ml_metadata
+    route:
+    - destination:
+        host: metadata-envoy-service.kubeflow.svc.cluster.local
+        port:
+          number: 9090

apps/pipeline/upstream/base/pipeline/kustomization.yaml

@@ -36,14 +36,14 @@ resources:
   - viewer-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/api-server
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/persistenceagent
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/scheduledworkflow
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/frontend
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/viewer-crd-controller
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
   - name: gcr.io/ml-pipeline/visualization-server
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0

apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml

@@ -7,4 +7,4 @@ resources:
   - metadata-writer-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/metadata-writer
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0

apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 images:
   - name: gcr.io/ml-pipeline/inverse-proxy-agent
-    newTag: 1.5.0-rc.2
+    newTag: 1.5.0
 resources:
   - proxy-configmap.yaml
   - proxy-deployment.yaml

apps/pipeline/upstream/env/platform-agnostic-multi-user-legacy/kustomization.yaml

@@ -4,6 +4,7 @@ kind: Kustomization
 bases:
   - ../../base/installs/multi-user
   - ../../base/metadata/overlays/db
+  - ../../base/metadata/options/istio
   - ../../third-party/argo/installs/cluster
   - ../../third-party/mysql/base
   - ../../third-party/mysql/options/istio

apps/pipeline/upstream/env/platform-agnostic-multi-user/kustomization.yaml

@@ -4,6 +4,7 @@ kind: Kustomization
 bases:
   - ../../base/installs/multi-user
   - ../../base/metadata/base
+  - ../../base/metadata/options/istio
   - ../../third-party/argo/installs/cluster
   - ../../third-party/mysql/base
   - ../../third-party/mysql/options/istio

apps/pipeline/upstream/third-party/minio/options/istio/istio-authorization-policy.yaml

@@ -1,4 +1,3 @@
-
 apiVersion: security.istio.io/v1beta1
 kind: AuthorizationPolicy
 metadata: