bump training-operator version 1.6 -> 1.7 for CKF 1.8 (#131)

Update manifests and image version Closes #129
canonical · Sep 12, 2023 · fb7566d · fb7566d
1 parent 93f53e8
commit fb7566d
Show file tree

Hide file tree

Showing 3 changed files with 2,445 additions and 410 deletions.
diff --git a/metadata.yaml b/metadata.yaml
@@ -14,7 +14,7 @@ resources:
   training-operator-image:
     type: oci-image
     description: OCI image for training-operator
-    upstream-source: kubeflow/training-operator:v1-66aa635
+    upstream-source: kubeflow/training-operator:v1-855e096
 provides:
   metrics-endpoint:
     interface: prometheus_scrape

diff --git a/src/templates/auth_manifests.yaml.j2 b/src/templates/auth_manifests.yaml.j2
@@ -3,31 +3,186 @@
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
-  labels:
-    app: {{ app_name }}
   name: {{ namespace }}-{{ app_name }}-charm
 rules:
+  - apiGroups:
+      - ""
+    resources:
+      - configmaps
+    verbs:
+      - create
+      - list
+      - update
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - pods/exec
+    verbs:
+      - create
+  - apiGroups:
+      - ""
+    resources:
+      - serviceaccounts
+    verbs:
+      - create
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - services
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - autoscaling
+    resources:
+      - horizontalpodautoscalers
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
       - kubeflow.org
     resources:
       - mpijobs
-      - tfjobs
-      - mxjobs
-      - pytorchjobs
-      - xgboostjobs
-      - paddlejobs
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - mpijobs/finalizers
+    verbs:
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
       - mpijobs/status
-      - tfjobs/status
-      - pytorchjobs/status
+    verbs:
+      - get
+      - patch
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - mxjobs
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - mxjobs/finalizers
+    verbs:
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
       - mxjobs/status
-      - xgboostjobs/status
+    verbs:
+      - get
+      - patch
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - paddlejobs
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - paddlejobs/finalizers
+    verbs:
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
       - paddlejobs/status
-      - mpijobs/finalizers
-      - tfjobs/finalizers
+    verbs:
+      - get
+      - patch
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - pytorchjobs
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - kubeflow.org
+    resources:
       - pytorchjobs/finalizers
-      - mxjobs/finalizers
-      - xgboostjobs/finalizers
-      - paddlejobs/finalizers
+    verbs:
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
+     - pytorchjobs/status
+    verbs:
+      - get
+      - patch
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - tfjobs
     verbs:
       - create
       - delete
@@ -37,67 +192,88 @@ rules:
       - update
       - watch
   - apiGroups:
-      - ""
+      - kubeflow.org
     resources:
-      - pods
-      - services
-      - endpoints
-      - events
+      - tfjobs/finalizers
     verbs:
-      - "*"
+      - update
   - apiGroups:
-      - apps
-      - extensions
+      - kubeflow.org
     resources:
-      - deployments
+      - tfjobs/status
     verbs:
-      - "*"
+      - get
+      - patch
+      - update
   # This is needed for the launcher role of the MPI operator.
   - apiGroups:
-      - ""
+      - kubeflow.org
     resources:
-      - pods/exec
+      - xgboostjobs
     verbs:
       - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - xgboostjobs/finalizers
+    verbs:
+      - update
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - xgboostjobs/status
+    verbs:
+      - get
+      - patch
+      - update
   - apiGroups:
       - rbac.authorization.k8s.io
     resources:
-      - roles
       - rolebindings
     verbs:
       - create
       - list
-      - watch
       - update
+      - watch
   - apiGroups:
-      - ""
+      - rbac.authorization.k8s.io
     resources:
-    - configmaps
-    - secrets
-    - serviceaccounts
+      - roles
     verbs:
       - create
       - list
-      - watch
       - update
+      - watch
   - apiGroups:
       - scheduling.volcano.sh
     resources:
       - podgroups
     verbs:
-      - "*"
-  - apiGroups:
-      - autoscaling
-    resources:
-      - horizontalpodautoscalers
-    verbs:
-      - "*"
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
   - apiGroups:
-      - scheduling.sigs.k8s.io
+      - scheduling.x-k8s.io
     resources:
       - podgroups
     verbs:
-      - "*"
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
 # Source manifests/apps/training-operator/upstream/overlays/kubeflow/kubeflow-training-roles.yaml
 ---
 apiVersion: rbac.authorization.k8s.io/v1