Update kubeflow/pipelines manifests from 2.0.0-alpha.5

README.md

@@ -53,7 +53,7 @@ This repo periodically syncs all official Kubeflow components from their respect
 | Katib | apps/katib/upstream | [v0.14.0-rc.0](https://github.com/kubeflow/katib/tree/v0.14.0-rc.0/manifests/v1beta1) |
 | KServe | contrib/kserve/kserve | [release-0.8](https://github.com/kserve/kserve/tree/8079f375cbcedc4d45a1b4aade2e2308ea6f9ae8/install/v0.8.0) |
 | KServe Models Web App | contrib/kserve/models-web-app | [v0.8.1](https://github.com/kserve/models-web-app/tree/v0.8.1/config) |
-| Kubeflow Pipelines | apps/pipeline/upstream | [2.0.0-alpha.3](https://github.com/kubeflow/pipelines/tree/2.0.0-alpha.3/manifests/kustomize) |
+| Kubeflow Pipelines | apps/pipeline/upstream | [2.0.0-alpha.5](https://github.com/kubeflow/pipelines/tree/2.0.0-alpha.5/manifests/kustomize) |
 | Kubeflow Tekton Pipelines | apps/kfp-tekton/upstream | [v1.2.1](https://github.com/kubeflow/kfp-tekton/tree/v1.2.1/manifests/kustomize) |
 
 The following is also a matrix with versions from common components that are

apps/pipeline/upstream/base/cache-deployer/kustomization.yaml

@@ -8,4 +8,4 @@ commonLabels:
   app: cache-deployer
 images:
   - name: gcr.io/ml-pipeline/cache-deployer
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5

apps/pipeline/upstream/base/cache/kustomization.yaml

@@ -10,4 +10,4 @@ commonLabels:
   app: cache-server
 images:
   - name: gcr.io/ml-pipeline/cache-server
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5

apps/pipeline/upstream/base/installs/generic/pipeline-install-config.yaml

@@ -11,7 +11,7 @@ data:
     until the changes take effect. A quick way to restart all deployments in a
     namespace: `kubectl rollout restart deployment -n <your-namespace>`.
   appName: pipeline
-  appVersion: 2.0.0-alpha.3
+  appVersion: 2.0.0-alpha.5
   dbHost: mysql
   dbPort: "3306"
   mlmdDb: metadb

apps/pipeline/upstream/base/installs/multi-user/persistence-agent/cluster-role.yaml

@@ -19,3 +19,9 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - ''
+  resources:
+  - namespaces
+  verbs:
+  - get

apps/pipeline/upstream/base/installs/multi-user/persistence-agent/deployment-patch.yaml

@@ -7,7 +7,14 @@ spec:
     spec:
       containers:
       - name: ml-pipeline-persistenceagent
+        envFrom:
+        - configMapRef:
+            name: persistenceagent-config
         env:
         - name: NAMESPACE
           value: ''
           valueFrom: null
+        - name: KUBEFLOW_USERID_HEADER
+          value: kubeflow-userid
+        - name: KUBEFLOW_USERID_PREFIX
+          value: ""

apps/pipeline/upstream/base/installs/multi-user/persistence-agent/kustomization.yaml

@@ -3,3 +3,7 @@ kind: Kustomization
 resources:
 - cluster-role.yaml
 - cluster-role-binding.yaml
+configMapGenerator:
+- name: persistenceagent-config
+  envs:
+  - params.env

apps/pipeline/upstream/base/installs/multi-user/persistence-agent/params.env

@@ -0,0 +1 @@
+MULTIUSER=true

apps/pipeline/upstream/base/installs/multi-user/view-edit-cluster-roles.yaml

@@ -69,6 +69,8 @@ rules:
   - retry
   - terminate
   - unarchive
+  - reportMetrics
+  - readArtifact
 - apiGroups:
   - pipelines.kubeflow.org
   resources:
@@ -111,11 +113,18 @@ rules:
   - pipelines
   - pipelines/versions
   - experiments
-  - runs
   - jobs
   verbs:
   - get
   - list
+- apiGroups:
+  - pipelines.kubeflow.org
+  resources:
+  - runs
+  verbs:
+  - get
+  - list
+  - readArtifact
 - apiGroups:
   - kubeflow.org
   resources:

apps/pipeline/upstream/base/metadata/base/kustomization.yaml

@@ -9,4 +9,4 @@ resources:
   - metadata-grpc-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/metadata-envoy
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5

apps/pipeline/upstream/base/pipeline/kustomization.yaml

@@ -37,14 +37,14 @@ resources:
   - kfp-launcher-configmap.yaml
 images:
   - name: gcr.io/ml-pipeline/api-server
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5
   - name: gcr.io/ml-pipeline/persistenceagent
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5
   - name: gcr.io/ml-pipeline/scheduledworkflow
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5
   - name: gcr.io/ml-pipeline/frontend
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5
   - name: gcr.io/ml-pipeline/viewer-crd-controller
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5
   - name: gcr.io/ml-pipeline/visualization-server
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5

apps/pipeline/upstream/base/pipeline/metadata-writer/kustomization.yaml

@@ -7,4 +7,4 @@ resources:
   - metadata-writer-sa.yaml
 images:
   - name: gcr.io/ml-pipeline/metadata-writer
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5

apps/pipeline/upstream/base/pipeline/ml-pipeline-persistenceagent-deployment.yaml

@@ -25,6 +25,10 @@ spec:
             value: "86400"
           - name: NUM_WORKERS
             value: "2"
+          - name: KUBEFLOW_USERID_HEADER
+            value: kubeflow-userid
+          - name: KUBEFLOW_USERID_PREFIX
+            value: ""
         image: gcr.io/ml-pipeline/persistenceagent:dummy
         imagePullPolicy: IfNotPresent
         name: ml-pipeline-persistenceagent

apps/pipeline/upstream/base/pipeline/ml-pipeline-persistenceagent-role.yaml

@@ -18,4 +18,10 @@ rules:
   verbs:
   - get
   - list
-  - watch
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - namespaces
+  verbs:
+  - get

apps/pipeline/upstream/env/gcp/inverse-proxy/kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 images:
   - name: gcr.io/ml-pipeline/inverse-proxy-agent
-    newTag: 2.0.0-alpha.3
+    newTag: 2.0.0-alpha.5
 resources:
   - proxy-configmap.yaml
   - proxy-deployment.yaml

tests/gh-actions/install_pipelines.sh

@@ -7,4 +7,4 @@ kubectl apply -f third-party/metacontroller/base/crd.yaml
 echo "Waiting for crd/compositecontrollers.metacontroller.k8s.io to be available ..."
 kubectl wait --for condition=established --timeout=30s crd/compositecontrollers.metacontroller.k8s.io
 kustomize build env/cert-manager/platform-agnostic-multi-user | kubectl apply -f -
-kubectl wait --for=condition=Ready pods --all --all-namespaces --timeout 180s
+kubectl wait --for=condition=Ready pods --all --all-namespaces --timeout 300s