Udate kfam v1.9.0

canonical · Sep 11, 2024 · e12751c · e12751c
1 parent d74bfd2
commit e12751c
Showing 1 changed file with 12 additions and 10 deletions.
diff --git a/kfam/rockcraft.yaml b/kfam/rockcraft.yaml
@@ -1,36 +1,44 @@
 #!/usr/bin/env python3
 # Copyright 2023 Canonical Ltd.
 # See LICENSE file for licensing details.
+# Constructed from https://github.com/kubeflow/kubeflow/blob/v1.9.0/components/access-management/Dockerfile
 
 name: kfam
 summary: Kubeflow Access Management API
 description: Kubeflow Access Management API provides fine-grain user-namespace level access control.
-version: "v1.8.0"
+version: "v1.9.0"
 license: Apache-2.0
 base: ubuntu@22.04
 
 platforms:
   amd64:
 
 services:
-  access-manager:
+  kubeflow-kfam:
     override: replace
-    command: "/access-management -cluster-admin admin -userid-header kubeflow-userid -userid-prefix ''"
+    command: "/access-management"
     startup: enabled
     user: ubuntu
 
 parts:
+  security-team-requirement:
+    plugin: nil
+    override-build: |
+      mkdir -p ${CRAFT_PART_INSTALL}/usr/share/rocks
+      (echo "# os-release" && cat /etc/os-release && echo "# dpkg-query" && dpkg-query -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) > ${CRAFT_PART_INSTALL}/usr/share/rocks/dpkg.query
+
   kfam:
     plugin: go
     build-snaps:
       - go/1.19/stable
     source: https://github.com/kubeflow/kubeflow.git
     source-subdir: components/access-management
     source-type: git
-    source-tag: v1.8.0
+    source-tag: v1.9.0
     build-environment:
       - CGO_ENABLED: 0
       - GOOS: linux
+    # Override-build because we want to move the hashicorp librarry folder
     override-build: |
       # cd into $CRAFT_PART_SRC_WORK due to https://github.com/canonical/craft-parts/issues/427
       cd $CRAFT_PART_SRC_WORK
@@ -40,12 +48,6 @@ parts:
       cp -r third_party $CRAFT_PART_INSTALL/third_party
       cp -r /root/go/pkg/mod/github.com/hashicorp $CRAFT_PART_INSTALL/third_party/library/
 
-      # security requirement
-      mkdir -p ${CRAFT_PART_INSTALL}/usr/share/rocks
-      (echo "# os-release" && cat /etc/os-release && echo "# dpkg-query" && \
-      dpkg-query -f '${db:Status-Abbrev},${binary:Package},${Version},${source:Package},${Source:Version}\n' -W) \
-      > ${CRAFT_PART_INSTALL}/usr/share/rocks/dpkg.query
-
   non-root-user:
     plugin: nil
     after: [kfam]