Add istio sidecar inject false to deployments in kubeflow ns

admission-webhook/webhook/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c
@@ -16,4 +19,4 @@ spec:
       - name: webhook-cert
         secret:
           secretName: webhook-certs
-      serviceAccountName: service-account    
+      serviceAccountName: service-account

aws/aws-alb-ingress-controller/base/deployment.yaml

@@ -17,6 +17,8 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: alb-ingress-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
         - name: alb-ingress-controller
@@ -48,4 +50,4 @@ spec:
           # Repository location of the ALB Ingress Controller.
           image: docker.io/amazon/aws-alb-ingress-controller:v1.1.2
           imagePullPolicy: Always
-      serviceAccountName: alb-ingress-controller
+      serviceAccountName: alb-ingress-controller

common/basic-auth/base/gatekeeper-deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: basic-auth
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app

common/basic-auth/base/kflogin-deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: basic-auth-login
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: app

common/centraldashboard/base/deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: centraldashboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/centraldashboard

common/spartakus/base/deployment.yaml

@@ -10,6 +10,8 @@ spec:
     metadata:
       labels:
         app: spartakus-volunteer
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

gcp/cloud-endpoints/base/deployment.yaml

@@ -8,6 +8,8 @@ spec:
     metadata:
       labels:
         app: cloud-endpoints-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/cloud-solutions-group/cloud-endpoints-controller:0.2.1

jupyter/jupyter-web-app/base/deployment.yaml

@@ -5,6 +5,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

jupyter/notebook-controller/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: manager

katib/katib-controller/base/katib-controller-deployment.yaml

@@ -13,6 +13,8 @@ spec:
     metadata:
       labels:
         app: katib-controller
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       serviceAccountName: katib-controller
       containers:

katib/katib-controller/base/katib-db-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: katib
         component: db
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-db

katib/katib-controller/base/katib-manager-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: katib
         component: manager
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-manager

katib/katib-controller/base/katib-ui-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: katib
         component: ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: katib-ui

kubebench/base/deployment.yaml

@@ -10,6 +10,8 @@ spec:
     metadata:
       labels:
         app: kubebench-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: kubebench-config

modeldb/base/artifact-store-deployment.yaml

@@ -17,6 +17,8 @@ spec:
       labels:
         app: modeldb
         tier: artifact-store
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

modeldb/base/backend-deployment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: backend
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

modeldb/base/mysql-backend-deployment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: mysql
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

modeldb/base/proxy-deployment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: backend-proxy
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

modeldb/base/webapp-deplyment.yaml

@@ -16,6 +16,8 @@ spec:
       labels:
         app: modeldb
         tier: webapp
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: vertaaiofficial/modeldb-frontend:kubeflow

mpi-job/mpi-operator/base/deployment.yaml

@@ -11,6 +11,8 @@ spec:
     metadata:
       labels:
         app: mpi-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

mxnet-job/mxnet-operator/base/deployment.yaml

@@ -8,6 +8,8 @@ spec:
     metadata:
       labels:
         name: mxnet-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

pipeline/api-service/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: ml-pipeline
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-api-server
@@ -15,17 +18,17 @@ spec:
         image: gcr.io/ml-pipeline/api-server
         imagePullPolicy: IfNotPresent
         command:
-          - apiserver 
+          - apiserver
           - --config=/etc/ml-pipeline-config
-          - --sampleconfig=/config/sample_config.json 
+          - --sampleconfig=/config/sample_config.json
           - -logtostderr=true
         ports:
         - containerPort: 8888
         - containerPort: 8887
         volumeMounts:
         - name: config-volume
           mountPath: /etc/ml-pipeline-config
-      serviceAccountName: ml-pipeline      
+      serviceAccountName: ml-pipeline
       volumes:
         - name: config-volume
           configMap:

pipeline/minio/base/deployment.yaml

@@ -6,6 +6,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: minio

pipeline/mysql/base/deployment.yaml

@@ -6,6 +6,9 @@ spec:
   strategy:
     type: Recreate
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: mysql

pipeline/persistent-agent/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: persistenceagent
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-persistenceagent

pipeline/pipeline-visualization-service/base/deployment.yaml

@@ -12,6 +12,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-visualizationserver
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/ml-pipeline/visualization-server

pipeline/pipelines-ui/base/deployment.yaml

@@ -12,6 +12,8 @@ spec:
     metadata:
       labels:
         app: ml-pipeline-ui
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-ui

pipeline/pipelines-ui/overlays/gcp/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: ml-pipeline-ui
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       volumes:
       - name: gcp-sa-token

pipeline/pipelines-viewer/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: controller-deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - env:

pipeline/scheduledworkflow/base/deployment.yaml

@@ -4,6 +4,9 @@ metadata:
   name: ml-pipeline-scheduledworkflow
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: ml-pipeline-scheduledworkflow

profiles/base/deployment.yaml

@@ -5,6 +5,9 @@ metadata:
 spec:
   replicas: 1
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

pytorch-job/pytorch-operator/base/deployment.yaml

@@ -11,6 +11,8 @@ spec:
     metadata:
       labels:
         name: pytorch-operator
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - command:

spark/spark-operator/base/deploy.yaml

@@ -16,6 +16,7 @@ spec:
         prometheus.io/path: /metrics
         prometheus.io/port: "10254"
         prometheus.io/scrape: "true"
+        sidecar.istio.io/inject: "false"
       initializers:
         pending: []
       labels:

tektoncd/tektoncd-dashboard/base/deployment.yaml

@@ -7,6 +7,8 @@ spec:
   template:
     metadata:
       name: tekton-dashboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: tekton-dashboard

tektoncd/tektoncd-install/base/deployment.yaml

@@ -15,6 +15,7 @@ spec:
     metadata:
       annotations:
         cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
+        sidecar.istio.io/inject: "false"
       labels:
         app: tekton-pipelines-controller
 #        app.kubernetes.io/component: controller
@@ -83,6 +84,7 @@ spec:
     metadata:
       annotations:
         cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
+        sidecar.istio.io/inject: "false"
       labels:
         app: tekton-pipelines-webhook
 #        app.kubernetes.io/component: webhook-controller

tensorboard/base/deployment.yaml

@@ -10,6 +10,8 @@ spec:
     metadata:
       labels:
         app: tensorboard
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - args:

tests/admission-webhook-webhook-base_test.go

@@ -101,6 +101,9 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - image: gcr.io/kubeflow-images-public/admission-webhook:v20190520-v0-139-gcee39dbc-dirty-0d8f4c
@@ -113,7 +116,7 @@ spec:
       - name: webhook-cert
         secret:
           secretName: webhook-certs
-      serviceAccountName: service-account    
+      serviceAccountName: service-account
 `)
 	th.writeF("/manifests/admission-webhook/webhook/base/mutating-webhook-configuration.yaml", `
 apiVersion: admissionregistration.k8s.io/v1beta1