mount object store creds in ml-pipeline-ui deployment (#16)

nutanix · Oct 19, 2023 · cea120b · cea120b
1 parent 8c1d0c1
commit cea120b
Show file tree

Hide file tree

Showing 3 changed files with 65 additions and 0 deletions.
diff --git a/kubeflow/overlays/ntnx/kustomization.yaml b/kubeflow/overlays/ntnx/kustomization.yaml
@@ -23,6 +23,10 @@ configMapGenerator:
   behavior: replace
   files:
   - config
+- name: ml-pipeline-ui-configmap
+  behavior: replace
+  files:
+  - viewer-pod-template.json
 
 secretGenerator:
 - name: mlpipeline-minio-artifact

diff --git a/kubeflow/overlays/ntnx/ntnx-config-patch.yaml b/kubeflow/overlays/ntnx/ntnx-config-patch.yaml
@@ -1,5 +1,38 @@
 apiVersion: apps/v1
 kind: Deployment
+metadata:
+  name: ml-pipeline-ui
+spec:
+  template:
+    metadata:
+      labels:
+        app: ml-pipeline-ui
+    spec:
+      volumes:
+        - name: config-volume
+          configMap:
+            name: ml-pipeline-ui-configmap
+      containers:
+        - name: ml-pipeline-ui
+          env:
+            - name: AWS_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: mlpipeline-minio-artifact
+                  key: accesskey
+            - name: AWS_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: mlpipeline-minio-artifact
+                  key: secretkey
+            - name: AWS_S3_ENDPOINT
+              valueFrom:
+                configMapKeyRef:
+                  name: pipeline-install-config
+                  key: objStoreHost
+---
+apiVersion: apps/v1
+kind: Deployment
 metadata:
   name: ml-pipeline
 spec:

diff --git a/kubeflow/overlays/ntnx/viewer-pod-template.json b/kubeflow/overlays/ntnx/viewer-pod-template.json
@@ -0,0 +1,28 @@
+{
+    "spec": {
+      "containers": [
+        {
+          "env": [
+            {
+              "name": "AWS_ACCESS_KEY_ID",
+              "valueFrom": {
+                "secretKeyRef": {
+                  "name": "mlpipeline-minio-artifact",
+                  "key": "accesskey"
+                }
+              }
+            },
+            {
+              "name": "AWS_SECRET_ACCESS_KEY",
+              "valueFrom": {
+                "secretKeyRef": {
+                  "name": "mlpipeline-minio-artifact",
+                  "key": "secretkey"
+                }
+              }
+            }
+          ]
+        }
+      ]
+    }
+  }