XiNLuy3M

1# Configuration for the Argo artifact repository on Kubeflow's minio
2
3## create a clusterrolebinding named default-admin (workaround?)
4~~~
5$ kubectl create clusterrolebinding default-admin --clusterrole cluster-admin --serviceaccount=default:default
6~~~
7
8## edit a configmap named workflow-controller-configmap
9~~~
10$ kubectl edit configmap workflow-controller-configmap -n kubeflow
11$ kubectl get configmap workflow-controller-configmap -n kubeflow -o yaml
12apiVersion: v1
13data:
14  config: |
15    executorImage: argoproj/argoexec:v2.2.0
16    artifactRepository:
17      s3:
18        bucket: my-bucket
19        keyPrefix: prefix/in/bucket     #optional
20        endpoint: minio-service.kubeflow.svc.cluster.local:9000        #AWS => s3.amazonaws.com; GCS => storage.googleapis.com
21        insecure: true                  #omit for S3/GCS. Needed when minio runs without TLS
22        accessKeySecret:                #omit if accessing via AWS IAM
23          name: my-minio-cred
24          key: accesskey
25        secretKeySecret:                #omit if accessing via AWS IAM
26          name: my-minio-cred
27          key: secretkey
28kind: ConfigMap
29metadata:
30  annotations:
31    ksonnet.io/managed: '{"pristine":"H4sIAAAAAAAA/zSOsW7DMAwF935F8WbHaTNy7dSha3dGYQxVEilISlLA8L8XdJHtAB4PbwXX+C2tR1MQ7u+YcOHBoBXB9BoXEORXwm1Y+yy8CL1yW6w2+zk6+I3up/k0v2GbkKJeQPjYX7+4YkKRwc9k5rPk7pS6qcqYox2DlWoqOkDwpHeUi4DwsJau2R6HYDqa5Szt8D+r7G3XeuXgbrqdxV1s28sfAAAA//8BAAD//9N8wZfXAAAA"}'
32  creationTimestamp: "2018-12-19T13:59:36Z"
33  labels:
34    app.kubernetes.io/deploy-manager: ksonnet
35    ksonnet.io/component: argo
36  name: workflow-controller-configmap
37  namespace: kubeflow
38  resourceVersion: "572584"
39  selfLink: /api/v1/namespaces/kubeflow/configmaps/workflow-controller-configmap
40  uid: 51f41a77-0396-11e9-a4be-d4c9efce8e44
41~~~
42
43## create a secret with mino credentials
44~~~
45$ access_key=minio
46$ secret_key=minio123
47$ kubectl create secret generic my-minio-cred --from-literal=accesskey=${access_key} --from-literal=secretkey=${secret_key}
48secret/my-minio-cred created
49$ kubectl get secret my-minio-cred -o yaml
50apiVersion: v1
51data:
52  accesskey: bWluaW8=
53  secretkey: bWluaW8xMjM=
54kind: Secret
55metadata:
56  creationTimestamp: "2018-12-22T17:27:24Z"
57  name: my-minio-cred
58  namespace: default
59  resourceVersion: "572074"
60  selfLink: /api/v1/namespaces/default/secrets/my-minio-cred
61  uid: d8783581-060e-11e9-a4be-d4c9efce8e44
62type: Opaque
63~~~