Kubeflow Multi-user with Istio authn/authz

The slides are based on the talks from KubeCon NA 2019
- Enabling Kubeflow with Enterprise-Grade Auth for On-Prem Deployment Yannis Zarkadas & Krishna Durai

Transcript

1. Kubeflow v0.7 Multi-user Auth with Istio FROM 2019 KUBECON NA
2. ⦁ InfuseAI Software Engineer ⦁ Kubeflow Contributor ⦁ Kubeflow/tf-operator 只有 code review 和 /LGTM 權限的小小 Reviewer About me – Jack Lin
3. Reference • The following content and slides mostly come from • https://www.youtube.com/watch?v=qyUyYLvmKHY&feature=youtu.be • https://docs.google.com/presentation/d/1j5tBrCkLNG-QxTl44iv- x5KpCapnczpxCbUzSciA2l8/edit#slide=id.g479421b711_0_0 • I also wrote a summary for the details • https://chanyilin.github.io/kubeflow-v0-7-0-deploy.html • https://chanyilin.github.io/kubeflow-istio-authnz.html • https://chanyilin.github.io/kubeflow-istio-authnz-2.html
13. Demo
14. Kubeflow/Profile https://github.com/kubeflow/kubeflow/tree/master/components/profile-controller Profile Namespace Istio/ ServiceRole Istio/ ServiceRole Binding K8s/ RoleBinding K8s/ admin- ClusterRole Jack
15. Kubeflow 1.0 in Jan 2020 • Kubeflow Roadmap • (https://github.com/kubeflow/kubeflow/blob/master/ROADMAP.md) • How other companies using Kubeflow • Spotify - Building and Managing a Centralized Kubeflow Platform at Spotify • Uber - Kubernetizing Big Data and ML Workloads at Uber