feat(istio/kubeflow-gateway): update all configs to reference CNP kubeflow gateway.

kustomize/apps/centraldashboard/base/kustomization.yaml

@@ -8,3 +8,13 @@ patchesStrategicMerge:
 - deployment.yaml
 - centraldashboard-config.yaml
 - authorizationpolicy.yaml
+
+patches:
+  # Patch all VirtualServices to use centralized Kubeflow ingress gateway
+  - patch: |-
+      - op: replace
+        path: /spec/gateways
+        value: ["istio-system/kubeflow-istio-ingress-gateway-https"]
+    target:
+      group: networking.istio.io
+      kind: VirtualService

kustomize/apps/jupyter-web-app/base/kustomization.yaml

@@ -20,3 +20,13 @@ configMapGenerator:
 
 generatorOptions:
   disableNameSuffixHash: true
+
+patches:
+  # Patch all VirtualServices to use centralized Kubeflow ingress gateway
+  - patch: |-
+      - op: replace
+        path: /spec/gateways
+        value: ["istio-system/kubeflow-istio-ingress-gateway-https"]
+    target:
+      group: networking.istio.io
+      kind: VirtualService

kustomize/apps/jupyter-web-app/base/vs.yaml

@@ -4,7 +4,7 @@ metadata:
   name: jupyter-web-app-jupyter-web-app
 spec:
   gateways:
-  - kubeflow-gateway
+  - istio-system/kubeflow-istio-ingress-gateway-https
   hosts:
   - '*'
   http:
@@ -23,4 +23,4 @@ spec:
     - destination:
         host: jupyter-web-app-service.$(JWA_NAMESPACE).svc.$(JWA_CLUSTER_DOMAIN)
         port:
-          number: 80
+          number: 80

kustomize/apps/katib/base/kustomization.yaml

@@ -20,3 +20,13 @@ patchesJson6902:
       - op: replace
         path: "/apiVersion"
         value: cert-manager.io/v1
+
+patches:
+  # Patch all VirtualServices to use centralized Kubeflow ingress gateway
+  - patch: |-
+      - op: replace
+        path: /spec/gateways
+        value: ["istio-system/kubeflow-istio-ingress-gateway-https"]
+    target:
+      group: networking.istio.io
+      kind: VirtualService

kustomize/apps/notebook-controller/base/kustomization.yaml

@@ -6,3 +6,11 @@ resources:
 
 patchesStrategicMerge:
 - deployment.yaml
+
+configMapGenerator:
+# Update the link to the Gateway to use.
+# https://github.com/kubeflow/manifests/blob/c2795524afd97dc0776b804521bb7d937646e98f/apps/jupyter/notebook-controller/upstream/manager/kustomization.yaml#L5
+- name: config
+  behavior: merge
+  literals:
+  - ISTIO_GATEWAY=istio-system/kubeflow-istio-ingress-gateway-https

kustomize/apps/profiles/base/kustomization.yaml

@@ -12,6 +12,15 @@ configMapGenerator:
   files:
   - namespace-labels.yaml
 
-
 patchesStrategicMerge:
 - deployment.yaml
+
+patches:
+  # Patch all VirtualServices to use centralized Kubeflow ingress gateway
+  - patch: |-
+      - op: replace
+        path: /spec/gateways
+        value: ["istio-system/kubeflow-istio-ingress-gateway-https"]
+    target:
+      group: networking.istio.io
+      kind: VirtualService

kustomize/common/knative/base/kustomization.yaml

@@ -7,7 +7,6 @@ resources:
 
 patchesStrategicMerge:
 - config-domain.yaml
-- config-istio.yaml
 
 patches:
 - path: istio-webhook-deployment-patch.json
@@ -60,3 +59,18 @@ patchesJson6902:
       - op: replace
         path: "/spec/minReplicas"
         value: 3
+
+configMapGenerator:
+# Replace the example ConfigMap and the patch coming in:
+#  https://github.com/kubeflow/manifests/blob/c2795524afd97dc0776b804521bb7d937646e98f/common/knative/knative-serving/base/patches/configmap-patch.yaml#L8
+#  https://github.com/kubeflow/manifests/blob/c2795524afd97dc0776b804521bb7d937646e98f/common/knative/knative-serving/base/upstream/net-istio.yaml#L63
+- name: config-istio
+  namespace: knative-serving
+  behavior: replace
+  options:
+    disableNameSuffixHash: true
+  literals:
+  - gateway.ingress-general-system.general-istio-ingress-gateway-https=general.ingress-general-system.svc.cluster.local
+  - gateway.istio-system.kubeflow-istio-ingress-gateway-https=kubeflow.istio-system.svc.cluster.local
+  - local-gateway.istio-system.cluster-local-gateway=cluster-local-gateway.istio-system.svc.cluster.local
+  - local-gateway.mesh=mesh

kustomize/contrib/kserve/base/kfserve-config-configmap.yaml

@@ -0,0 +1,7 @@
+apiVersion: v1
+data:
+  ingressGateway: istio-system/kubeflow-istio-ingress-gateway-https
+kind: ConfigMap
+metadata:
+  name: kserve-config
+  namespace: kubeflow

kustomize/contrib/kserve/base/kustomization.yaml

@@ -8,6 +8,7 @@ resources:
 
 patchesStrategicMerge:
 - inferenceservice-configmap.yaml
+- kfserve-config-configmap.yaml
 
 ## Cert Manager
 patchesJson6902:

kustomize/contrib/seldon/base/kustomization.yaml

@@ -15,3 +15,19 @@ patchesJson6902:
       - op: replace
         path: "/apiVersion"
         value: cert-manager.io/v1
+
+patches:
+  - patch: |-
+      apiVersion: apps/v1
+      kind: Deployment
+      metadata:
+        name: seldon-controller-manager
+        namespace: kubeflow
+      spec:
+        template:
+          spec:
+            containers:
+            - name: manager
+              env:
+              - name: ISTIO_GATEWAY
+                value: istio-system/kubeflow-istio-ingress-gateway-https