feat: upgrade management cluster to 0.29.0 (kubeflow#805)

* feat: upgrade management cluster to KCC operator * update .build * set values * wip * wip2 * wip3 * update * update
Linchin · Nov 10, 2020 · 72aea15 · 72aea15
1 parent e2ec489
commit 72aea15
Show file tree

Hide file tree

Showing 151 changed files with 1,262 additions and 62,363 deletions.
diff --git a/test-infra/management/.build/cluster/cnrm.cloud.google.com_v1alpha1_cloudservice_gke.yaml b/test-infra/management/.build/cluster/cnrm.cloud.google.com_v1alpha1_cloudservice_gke.yaml
diff --git a/...d/cluster/container.cnrm.cloud.google.com_v1alpha2_containercluster_kf-ci-management.yaml b/...d/cluster/container.cnrm.cloud.google.com_v1alpha2_containercluster_kf-ci-management.yaml
diff --git a/...ld/cluster/container.cnrm.cloud.google.com_v1beta1_containercluster_kf-ci-management.yaml b/...ld/cluster/container.cnrm.cloud.google.com_v1beta1_containercluster_kf-ci-management.yaml
@@ -0,0 +1,14 @@
+apiVersion: container.cnrm.cloud.google.com/v1beta1
+kind: ContainerCluster
+metadata:
+  annotations:
+    gke.io/cluster: bootstrap://
+  name: kf-ci-management
+  namespace: kubeflow-ci
+spec:
+  initialNodeCount: 3
+  location: us-central1
+  releaseChannel:
+    channel: REGULAR
+  workloadIdentityConfig:
+    identityNamespace: kubeflow-ci.svc.id.goog
diff --git a/...tainernodepool_kf-ci-management-pool.yaml → ...inernodepool_kf-ci-management-pool-2.yaml b/...tainernodepool_kf-ci-management-pool.yaml → ...inernodepool_kf-ci-management-pool-2.yaml
@@ -1,8 +1,10 @@
-apiVersion: container.cnrm.cloud.google.com/v1alpha2
+apiVersion: container.cnrm.cloud.google.com/v1beta1
 kind: ContainerNodePool
 metadata:
+  annotations:
+    gke.io/cluster: bootstrap://
   clusterName: kubeflow-ci/us-central1/kf-ci-management
-  name: kf-ci-management-pool
+  name: kf-ci-management-pool-2
   namespace: kubeflow-ci
 spec:
   autoscaling:
@@ -23,7 +25,7 @@ spec:
     - https://www.googleapis.com/auth/devstorage.read_only
     - https://www.googleapis.com/auth/logging.write
     - https://www.googleapis.com/auth/monitoring
-    - https://www.googleapis.com/auth/servicecontrol
-    - https://www.googleapis.com/auth/service.management.readonly
     - https://www.googleapis.com/auth/trace.append
     preemptible: false
+    workloadMetadataConfig:
+      mode: GKE_METADATA
diff --git a/...ent/.build/cluster/identity.cnrm.cloud.google.com_v1alpha2_identitynamespace_default.yaml b/...ent/.build/cluster/identity.cnrm.cloud.google.com_v1alpha2_identitynamespace_default.yaml
diff --git a/.../cluster/serviceusage.cnrm.cloud.google.com_v1beta1_service_container.googleapis.com.yaml b/.../cluster/serviceusage.cnrm.cloud.google.com_v1beta1_service_container.googleapis.com.yaml
@@ -0,0 +1,8 @@
+apiVersion: serviceusage.cnrm.cloud.google.com/v1beta1
+kind: Service
+metadata:
+  annotations:
+    cnrm.cloud.google.com/deletion-policy: abandon
+    cnrm.cloud.google.com/disable-dependent-services: "false"
+  name: container.googleapis.com
+  namespace: kubeflow-ci
diff --git a/...tall-iam/iam.cnrm.cloud.google.com_v1beta1_iampolicy_kf-ci-management-cnrm-system-wi.yaml b/...tall-iam/iam.cnrm.cloud.google.com_v1beta1_iampolicy_kf-ci-management-cnrm-system-wi.yaml
@@ -0,0 +1,14 @@
+apiVersion: iam.cnrm.cloud.google.com/v1beta1
+kind: IAMPolicy
+metadata:
+  name: kf-ci-management-cnrm-system-wi
+  namespace: kubeflow-ci
+spec:
+  bindings:
+  - members:
+    - serviceAccount:kubeflow-ci.svc.id.goog[cnrm-system/cnrm-controller-manager]
+    role: roles/iam.workloadIdentityUser
+  resourceRef:
+    apiVersion: iam.cnrm.cloud.google.com/v1alpha1
+    kind: IAMServiceAccount
+    name: kf-ci-management-cnrm-system
diff --git a/...iam/iam.cnrm.cloud.google.com_v1beta1_iamserviceaccount_kf-ci-management-cnrm-system.yaml b/...iam/iam.cnrm.cloud.google.com_v1beta1_iamserviceaccount_kf-ci-management-cnrm-system.yaml
@@ -0,0 +1,7 @@
+apiVersion: iam.cnrm.cloud.google.com/v1beta1
+kind: IAMServiceAccount
+metadata:
+  name: kf-ci-management-cnrm-system
+  namespace: kubeflow-ci
+spec:
+  displayName: Service account for CNRM
diff --git a/...finition_accesscontextmanageraccesslevels.accesscontextmanager.cnrm.cloud.google.com.yaml b/...finition_accesscontextmanageraccesslevels.accesscontextmanager.cnrm.cloud.google.com.yaml