Update kserve/kserve manifests from v0.16.0 #3290
Conversation
Signed-off-by: juliusvonkohout <[email protected]>
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
| - IPC_LOCK | ||
| - SYS_RAWIO | ||
| - NET_RAW |
There was a problem hiding this comment.
That looks very dangerous and must be disabled
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
That looks very dangerous and must be disabled
| kind: LLMInferenceServiceConfig | ||
| metadata: | ||
| name: kserve-config-llm-worker-data-parallel | ||
| namespace: kserve |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| kind: LLMInferenceServiceConfig | ||
| metadata: | ||
| name: kserve-config-llm-template | ||
| namespace: kserve |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| kind: LLMInferenceServiceConfig | ||
| metadata: | ||
| name: kserve-config-llm-scheduler | ||
| namespace: kserve |
There was a problem hiding this comment.
Do you know why there is a namespace-level resource in the upstream file cluster-resources ? @yuzisun @terrytangyuan
| kind: LLMInferenceServiceConfig | ||
| metadata: | ||
| name: kserve-config-llm-router-route | ||
| namespace: kserve |
There was a problem hiding this comment.
Do you know why there is a namespace-level resource in the upstream file cluster-resources ?
| - IPC_LOCK | ||
| - SYS_RAWIO | ||
| - NET_RAW | ||
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| - IPC_LOCK | ||
| - SYS_RAWIO | ||
| - NET_RAW | ||
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| - IPC_LOCK | ||
| - SYS_RAWIO | ||
| - NET_RAW | ||
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| - IPC_LOCK | ||
| - SYS_RAWIO | ||
| - NET_RAW | ||
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: false | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
| drop: | ||
| - ALL | ||
| readOnlyRootFilesystem: true | ||
| runAsNonRoot: false |
There was a problem hiding this comment.
We need to delete this insecure resource and make sure that only the kubeflow namespace is used. Maybe by adding namespace=kubeflow in the overlay.
|
The kserve 0.16.0 release looks severely broken, maybe i should try 0.15.2 https://github.com/kserve/kserve/releases/tag/v0.15.2 first. |
|
fyi: llmisvc in kserve 0.16.0 added several dependent components. Related information can be found at the link below: |
@tarekabouzeid @varodrig @pschoen-itsc