v2.0.0

Caution

This is a major version release!

There are breaking changes in the kustomize manifests.
You MUST take manual steps to upgrade from v1.10.0 to v2.0.0, see "Upgrade Notes".

About this Release

This is the first release of Kubeflow Dashboard since the kubeflow/kubeflow repo split, see kubeflow/kubeflow#7549 for more details. Going forward, the kubeflow/dashboard repository will be the home of:

• Kubeflow Access Management API (KFAM)
• Kubeflow Admission Webhook (PodDefaults)
• Kubeflow Central Dashboard
• Kubeflow Profile Controller

What has Changed?

The most significant change is to the structure of the manifests, which have been refactored to follow modern kustomize practices and lay the foundation for easier consumption of future releases:

• Kubeflow Admission Webhook (PodDefaults):
  • Manifests @ v2.0.0: ./components/poddefaults-webhooks/manifests/kustomize
• Kubeflow Central Dashboard:
  • Manifests @ v2.0.0: ./components/centraldashboard/manifests/kustomize
• Kubeflow Profile Controller + Kubeflow Access Management API (KFAM):
  • Manifests @ v2.0.0: ./components/profile-controller/manifests/kustomize

The container registries for our images have moved under the ghcr.io/kubeflow/dashboard/... prefix:

• ghcr.io/kubeflow/dashboard/access-management
• ghcr.io/kubeflow/dashboard/dashboard
• ghcr.io/kubeflow/dashboard/poddefaults-webhook
• ghcr.io/kubeflow/dashboard/profile-controller

There have also been numerous dependency updates and bug fixes.

Upgrade Notes (v1 -> v2)

DO NOT deploy v2.0.0 (or later) manifests on a cluster which currently has v1.11.0 (or earlier). The structure has significantly changed and updates can NOT happen in-place. You must remove the following v1 components before installing v2:

• Kubeflow Admission Webhook (PodDefaults):
  • Kustomize Overlay @ v1.11.0: ./applications/admission-webhook/upstream/overlays/cert-manager
  • Kustomize Overlay @ v1.10.0: ./apps/admission-webhook/upstream/overlays/cert-manager
• Kubeflow Central Dashboard:
  • Kustomize Overlay @ v1.11.0: ./applications/centraldashboard/overlays/oauth2-proxy
  • Kustomize Overlay @ v1.10.0: ./apps/centraldashboard/overlays/oauth2-proxy
• Kubeflow Profile Controller + Kubeflow Access Management API (KFAM):
  • Kustomize Overlay @ v1.11.0: ./applications/profiles/pss
  • Kustomize Overlay @ v1.10.0: ./apps/profiles/upstream/overlays/kubeflow
  • Notes:
    • WARNING: do NOT delete the CustomResourceDefinition for Profiles this will delete all profile namespaces!
    • The API for Profiles is backward-compatible, so leave your Profiles unless you actually want to delete them.

For example, to remove Kubeflow Admission Webhook, if deployed from kubeflow/manifests @ v1.11.0:

# STEP 1: render the manifests to delete
KF_MANIFESTS_REPO="https://github.com/kubeflow/manifests.git"
KF_MANIFESTS_PATH="./applications/admission-webhook/upstream/overlays/cert-manager"
KF_MANIFESTS_TAG="v1.11.0"
kustomize build "${KF_MANIFESTS_REPO}//${KF_MANIFESTS_PATH}?ref=${KF_MANIFESTS_TAG}" \
  > to_delete.yaml

# STEP 2: remove any "CustomResourceDefinition" and "Namespace" resources from the list
#
# NOTE: we do this to avoid deleting the CRD itself to avoid deleting all instances
#       of important resources like Profile
#
yq 'select(.kind != "CustomResourceDefinition" and .kind != "Namespace" and .kind != null)' to_delete.yaml \
  > to_delete__no_crd.yaml

# STEP 3: delete with dry-run to verify the manifests are correct
kubectl delete -f to_delete__no_crd.yaml --ignore-not-found --dry-run

# STEP 4: delete the resources
#kubectl delete -f to_delete__no_crd.yaml --ignore-not-found

---

Full Changelog: 09225c0...v2.0.0