should "new" components like TrustyAI, Codeflare and KubeRay be added into the "work item" list too?

Codeflare and KubeRay fall into the Distributed Workloads item. We plan to start the integration ASAP, and we may break down the work items then.

from opendatahub-community.

Updating the status from an offline conversation:

• ServiceMesh integration using a kfdef will be made avaiable using the odh-manifests/service-mesh-integration branch. Component owners can use this to start development & migration to enable support for ServiceMesh (Istio) in the respective components
• In parallel, the @opendatahub-io/service-mesh-integration team will be working on migrating their service-mesh-integration manifests to the new odh-operator v2.x kustomize manifest AND work on integrating ServiceMesh logic into the codebase
• Follow-up with the @opendatahub-io/odh-operator-maintainers will decide how they want to make the ODH Operator + ServiceMesh integration available for component owners to test against

from opendatahub-community.

@bartoszmajsak @LaVLaS Following is the tracker issue for all the changes required for servicemesh in operator. This doesnot capture changes in individual repos.
opendatahub-io/opendatahub-operator#496

from opendatahub-community.

Work items for enabling Service Mesh Auth(z) across ODH

Operator v2

• Bring Service Mesh configuration to Operator V2
  • opendatahub-io/opendatahub-operator#496
  • opendatahub-io/opendatahub-operator#605
  • opendatahub-io/opendatahub-operator#668 (Feature fluent interface for KServe setup)
• Add service-mesh overlays to supported components' manifests (as there is a split in the works)
  • for reasons you can read this ADR
  • the current state of migration is reflected in https://github.com/opendatahub-io/opendatahub-operator/blob/incubation/get_all_manifests.sh
  • opendatahub-io/odh-dashboard#1900
  • opendatahub-io/kubeflow#184
    • done as part of opendatahub-io/kubeflow#172

Authorization (cross-cutting)

Reference: Auth(z) redesign

• Configure Authorino as an external authorization provider
• Create project-specific AuthConfig maistra/odh-project-controller#58
  • maistra/odh-project-controller#64

Components

Dashboard

• UI: opendatahub-io/odh-dashboard#1087
  • opendatahub-io/odh-dashboard#1088
• Manifests: Configure Service Mesh for Dashboard

Workbenches

• Manifests: Configure Service Mesh for Notebooks components
• Adjust Istio logic in Kubeflow controllers to handle Openshift Service Mesh integration
  • opendatahub-io/kubeflow#96
  • opendatahub-io/kubeflow#168
    • PR opendatahub-io/kubeflow#172
• opendatahub-io/opendatahub-operator#616

KServe / Model Serving Auth(z) using Service Mesh

• Enable Service Mesh Auth(z) configuration for KServe in Operator-V2
  • opendatahub-io/opendatahub-operator#614
• Handle KServe Domain pattern
  • opendatahub-io/kserve#96
• Envoyfilter for Activator requests with Host context
  • maistra/opendatahub-operator#13
• Workaround Envoy bug related to Authorization headers
  • maistra/opendatahub-operator#13
• AuthorizationPolicy to capture gRPC calls (exclude health checks)
  • maistra/opendatahub-operator#13
• Support anonymous models
  • opendatahub-io/odh-model-controller#98

Pipelines

• opendatahub-io/opendatahub-operator#615

Distributed Workloads

not started

Operator v1 not going to be supported

• Initial/PoC integration]
  • opendatahub-io/odh-manifests#818
• Implement proper resource reconciliation for KfDef not going to be supported for V1
  • opendatahub-io/opendatahub-operator#515
• Update upstream manifests repository not going to be supported
  • opendatahub-io/odh-manifests#932

from opendatahub-community.

@bartoszmajsak can you please update the work complete date?

from opendatahub-community.

should "new" components like TrustyAI, Codeflare and KubeRay be added into the "work item" list too?

from opendatahub-community.

@bartoszmajsak where would you like the issues to be created for tracking the DW pieces?

from opendatahub-community.

@bartoszmajsak where would you like the issues to be created for tracking the DW pieces?

to be honest I do not have an answer to that... perhaps @jkoehler-redhat can suggest something?

from opendatahub-community.