KEP-2170: Add the manifests overlay for Kubeflow Training V2

manifests/v2/base/manager/kustomization.yaml

@@ -1,4 +1,2 @@
 resources:
   - manager.yaml
-# TODO (andreyvelich): Move it to overlays once we copy the JobSet manifests.
-namespace: kubeflow-system

manifests/v2/base/rbac/kustomization.yaml

@@ -2,5 +2,3 @@ resources:
   - role.yaml
   - role_binding.yaml
   - service_account.yaml
-# TODO (andreyvelich): Move it to overlays once we copy the JobSet manifests.
-namespace: kubeflow-system

manifests/v2/base/webhook/kustomization.yaml

@@ -10,5 +10,3 @@ patches:
       kind: ValidatingWebhookConfiguration
 configurations:
   - kustomizeconfig.yaml
-# TODO (andreyvelich): Move it to overlays once we copy the JobSet manifests.
-namespace: kubeflow-system

manifests/v2/overlays/kubeflow-platform/kubeflow-training-roles.yaml

@@ -0,0 +1,84 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubeflow-training-admin-v2
+  labels:
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-admin-v2: "true"
+aggregationRule:
+  clusterRoleSelectors:
+    - matchLabels:
+        rbac.authorization.kubeflow.org/aggregate-to-kubeflow-training-admin-v2: "true"
+rules: []
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubeflow-training-edit-v2
+  labels:
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-edit-v2: "true"
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-training-admin-v2: "true"
+rules:
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - clustertrainingruntimes
+      - trainingruntimes
+      - trainjobs
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - patch
+      - update
+      - watch
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - trainjobs/status
+    verbs:
+      - get
+  - apiGroups:
+      - ""
+    resources:
+      - persistentvolumeclaims
+    verbs:
+      - create
+      - delete
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - get
+      - list
+      - watch
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubeflow-training-view-v2
+  labels:
+    rbac.authorization.kubeflow.org/aggregate-to-kubeflow-view-v2: "true"
+rules:
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - clustertrainingruntimes
+      - trainingruntimes
+      - trainjobs
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - kubeflow.org
+    resources:
+      - trainjobs/status
+    verbs:
+      - get

manifests/v2/overlays/kubeflow-platform/kustomization.yaml

@@ -0,0 +1,20 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: kubeflow
+resources:
+  - ../../base/crds
+  - ../../base/manager
+  - ../../base/rbac
+  - ../../base/webhook
+  - ../../base/runtimes/pre-training
+  - kubeflow-training-roles.yaml
+  # TODO (andreyvelich): JobSet should support kubeflow namespace.
+  - https://github.com/kubernetes-sigs/jobset/releases/download/v0.6.0/manifests.yaml
+images:
+  - name: kubeflow/training-operator-v2
+    newTag: latest
+secretGenerator:
+  - name: training-operator-v2-webhook-cert
+    namespace: kubeflow
+    options:
+      disableNameSuffixHash: true

manifests/v2/overlays/only-manager/kustomization.yaml

@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: kubeflow-system
 resources:
   - namespace.yaml
   - ../../base/crds

manifests/v2/overlays/standalone/kustomization.yaml

@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: kubeflow-system
 resources:
   - namespace.yaml
   - ../../base/crds