Manifests WG KF 1.9 tracker

[juliusvonkohout]

Let's use this issue to track work items for Manifests WG and KF 1.9
follow up of #2456

See also #2613 for version tracking
and security stuff implemented in the manifests repository #2598

• Ray: update ray to 2.23 and kuberay to 1.1.1 #2732 Add kuberay aggregated-roles #2675
• kserve/models-web-app v0.10.0 using kubeflow/kubeflow#2b4cc42e (not v1.7.0) #2433
• Make the kubeflow-m2m-oidc-configurator a CronJob #2667
• Getting Istio RBAC issues when submitting a pipeline from a Notebook #2747
• Create security scan script #2731

More work on /contrib components

• Update 20220926-contrib-component-guidelines.md #2329

Further improvements on both tooling and health of manifests

• Istio 1.22.1 #2750
• Upgrade guide #2216
• update manifests wg readme community#720
• Bentoml: Upgrade bentoml to 1.2.28 and 1.1.21 #2704
• seldon Update seldon manifests from v1.18.1 #2719
• update cert-manager to 1.14.5 #2703
• knative 1.12.4 Upgrade knative to v1.12.4 #2709
• Dex Upgrade dex to 2.39.1 #2710 https://github.com/dexidp/dex/releases/tag/v2.39.1 Also use hashFromEnv for oauth2-proxy overlay #2669 Decomission dex overlays for github and ldap #2596 https://github.com/kubeflow/manifests/pull/2590/files
• Kubernetes 1.27-1.29 Update to Kind 1.27 and fix the integration tests #2637 update kind to 1.28 #2643 Kubernetes 1.29 #2716
• Refactor test workflows  #2693
• Various cleanups and fixes (remove kubebench, rework synchronization scripts and github workflows) #2666
• Set ENABLE_LEGACY_FSGROUP_INJECTION to false for istio #2219 and Jupyter notebook user has group 1337 #2218
• Seldon: Updating seldon core to v1.17.1 #2532
• Kserve: Sync kserve manifests 0.13.0 #2751 Update kserve manifests from v0.11.2 #2627 KServe WebHook throws 500 due to loading root certificates #2553 Sync kserve manifests 0.12.1 #2696 Fix kserve upgrade script and update kserve diagram #2702
• Pipelines: Sync kubeflow pipelines manifests 2.1.0 #2695 Sync kubeflow pipelines manifests 2.2.0 #2700
• Model Registry: Update kubeflow/model-registry manifests from v0.2.0-alpha #2697 Add model registry sync script #2682
• Training operator: Update kubeflow/training-operator manifests from v1.8.0-rc.0 #2699
• Katib: Update kubeflow/katib manifests from V0.17.0 rc.0 #2698
• PVCviewer Create pvcviewer-webhook networkpolicy #2574

Oauth2-proxy and JWT

• Move away from AuthService #2469
• oauth2-proxy and Istio mesh support #2516
• oauth2-proxy and programmatic access clients #2517
• oauth2-proxy with istio mesh config and m2m bearer tokens #2544 also includes e2e testing
• Split istio-external-auth into two components #2670
• fix: istio 1.70 envoy filter chain should be changed. #2656

Kustomize 5 work

• Kubeflow manifests and kustomize 5 #2388 Maybe we should close it after 1.9 and open a new one.
• Fixes dex for kustomize 5 #2586
• Fixes user-namespace for kustomize 5 #2583
• fix most kustomize v5 warnings #2653
• Refactor ml-pipeline component for kustomize5 #2548
• kustomize 5.2.1 #2654
• Fix istio 1.16 and 1.17 and istio-cni 1.17 for kustomize 5 #2537

This is just an initial list based on ongoing efforts. Feel free to propose more work items that you are interested in driving to include them as part of our planning

cc @kubeflow/wg-manifests-leads @kimwnasptd

GSOC for 1.10 probably :

• Add the stalebot from To many open issues and PRs and no stalebot #2514
• New issue templates Creating Issue templates #2708
• New PR templates
• Maybe Switch to Istio CNI as default
• Let’s test if we can have the baseline PSS with the default Istio
• Istio CNI and setting the kserve-needed annotation across all Pods

[StefanoFioravanzo]

Hello @juliusvonkohout , this is a kind reminder that Monday, March 4th will be our Kubeflow 1.9 release development checkpoint, we will be halfway through our dev cycle, and we expect most of the work to be well underway (reminder: code freeze is scheduled for Apr 15th)

Can you please acknowledge your status with respect to the manifests roadmap, comment on the progress made so far, and provide an assessment of the work that remains?

The comment above includes a lot of work streams, part of which are probably related to the Security Working Groups. Can you please update the comment to list only the work that pertains to the Manifests, and clearly call out what's already completed and what remains to be done?

[juliusvonkohout]

@StefanoFioravanzo i updated the top post, but the development is still ongoing.

[juliusvonkohout]

@StefanoFioravanzo @rimolive i added lots of stuff and it should be more clear now what is left for 1.9.0 rc1

[StefanoFioravanzo]

@juliusvonkohout can we close this issue? I guess we are tracking any active item in #2763

[juliusvonkohout]

Yes i will close, but our shiny new stalebot would do so as well :-)