Adding kueue-viz templates in helm charts

kubernetes-sigs · Dec 16, 2024 · e7546f3 · e7546f3
1 parent 8f51174
commit e7546f3
Show file tree

Hide file tree

Showing 10 changed files with 258 additions and 0 deletions.
diff --git a/charts/kueue/templates/kueue-viz/backend-deployment.yaml b/charts/kueue/templates/kueue-viz/backend-deployment.yaml
@@ -0,0 +1,24 @@
+{{- if .Values.kueueViz.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kueue-viz-backend
+  namespace: {{ .Values.kueueViz.namespace }}
+spec:
+  replicas: {{ .Values.kueueViz.replicaCount }}
+  selector:
+    matchLabels:
+      app: kueue-viz-backend
+  template:
+    metadata:
+      labels:
+        app: kueue-viz-backend
+    spec:
+      containers:
+        - name: backend
+          image: {{ .Values.kueueViz.backend.image }}
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 8080
+{{- end }}
+
diff --git a/charts/kueue/templates/kueue-viz/backend-ingress.yaml b/charts/kueue/templates/kueue-viz/backend-ingress.yaml
@@ -0,0 +1,28 @@
+{{- if and .Values.kueueViz.enabled .Values.kueueViz.backend.ingress.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "kueue.fullname" . }}-backend-ingress
+  namespace: '{{ .Release.Namespace }}'
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  {{- if and .Values.enableCertManager .Values.kueueViz.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.kueueViz.backend.ingress.host }}
+      secretName: {{ include "kueue.fullname" . }}-kueue-viz-tls-secret
+  {{- end }}
+  rules:
+    - host: {{ .Values.kueueViz.backend.ingress.host }}
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ include "kueue.fullname" . }}-backend
+                port:
+                  number: 8080
+{{- end }}
diff --git a/charts/kueue/templates/kueue-viz/backend-service.yaml b/charts/kueue/templates/kueue-viz/backend-service.yaml
@@ -0,0 +1,15 @@
+{{- if .Values.kueueViz.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: kueue-viz-backend
+  namespace: {{ .Values.kueueViz.namespace }}
+spec:
+  type: ClusterIP
+  ports:
+    - port: 8080
+      targetPort: 8080
+  selector:
+    app: kueue-viz-backend
+{{- end }}
+
diff --git a/charts/kueue/templates/kueue-viz/clusterrole.yaml b/charts/kueue/templates/kueue-viz/clusterrole.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.kueueViz.enabled }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kueue-backend-read-access
+rules:
+  - apiGroups: ["kueue.x-k8s.io"]
+    resources: ["workloads", "clusterqueues", "localqueues", "resourceflavors"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: [""]
+    resources: ["pods", "events", "nodes"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["kueue.x-k8s.io"]
+    resources: ["workloadpriorityclass"]
+    verbs: ["get", "list", "watch"]
+{{- end }}
+
diff --git a/charts/kueue/templates/kueue-viz/clusterrolebinding.yaml b/charts/kueue/templates/kueue-viz/clusterrolebinding.yaml
@@ -0,0 +1,15 @@
+{{- if .Values.kueueViz.enabled }}
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: kueue-backend-read-access-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: kueue-backend-read-access
+subjects:
+  - kind: ServiceAccount
+    name: default
+    namespace: {{ .Values.kueueViz.namespace }}
+{{- end }}
+
diff --git a/charts/kueue/templates/kueue-viz/frontend-deployment.yaml b/charts/kueue/templates/kueue-viz/frontend-deployment.yaml
@@ -0,0 +1,29 @@
+{{- if .Values.kueueViz.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kueue-viz-frontend
+  namespace: {{ .Values.kueueViz.namespace }}
+spec:
+  replicas: {{ .Values.kueueViz.replicaCount }}
+  selector:
+    matchLabels:
+      app: kueue-viz-frontend
+  template:
+    metadata:
+      labels:
+        app: kueue-viz-frontend
+    spec:
+
+      containers:
+        - name: frontend
+          image: {{ .Values.kueueViz.frontend.image }}
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 8080
+          env:
+            - name: REACT_APP_WEBSOCKET_URL
+              value: "{{ if and .Values.kueueViz.tls.enabled }}wss://{{ else }}ws://{{ end }}{{ .Values.kueueViz.backend.ingress.host }}"
+
+{{- end }}
+
diff --git a/charts/kueue/templates/kueue-viz/frontend-ingress.yaml b/charts/kueue/templates/kueue-viz/frontend-ingress.yaml
@@ -0,0 +1,28 @@
+{{- if .Values.kueueViz.enabled }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "kueue.fullname" . }}-frontend-ingress
+  namespace: '{{ .Release.Namespace }}'
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+  {{- if and .Values.enableCertManager .Values.kueueViz.tls.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.kueueViz.frontend.ingress.host }}
+      secretName: {{ include "kueue.fullname" . }}-kueue-viz-tls-secret
+  {{- end }}
+  rules:
+    - host: {{ .Values.kueueViz.frontend.ingress.host }}
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: {{ include "kueue.fullname" . }}-frontend
+                port:
+                  number: 8080
+{{- end }}
diff --git a/charts/kueue/templates/kueue-viz/frontend-service.yaml b/charts/kueue/templates/kueue-viz/frontend-service.yaml
@@ -0,0 +1,15 @@
+{{- if .Values.kueueViz.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: kueue-viz-frontend
+  namespace: {{ .Values.kueueViz.namespace }}
+spec:
+  type: ClusterIP
+  ports:
+    - port: 8080
+      targetPort: 8080
+  selector:
+    app: kueue-viz-frontend
+{{- end }}
+
diff --git a/charts/kueue/templates/kueue-viz/tls-certificate.yaml b/charts/kueue/templates/kueue-viz/tls-certificate.yaml
@@ -0,0 +1,17 @@
+{{- if and .Values.enableCertManager .Values.kueueViz.tls.enabled }}
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: {{ include "kueue.fullname" . }}-kueue-viz-cert
+  namespace: '{{ .Release.Namespace }}'
+  labels:
+    {{- include "kueue.labels" . | nindent 4 }}
+spec:
+  dnsNames:
+    - {{ .Values.kueueViz.backend.ingress.host }}
+    - {{ .Values.kueueViz.frontend.ingress.host }}
+  issuerRef:
+    kind: Issuer
+    name: {{ include "kueue.fullname" . }}-selfsigned-issuer
+  secretName: {{ include "kueue.fullname" . }}-kueue-viz-tls-secret
+{{- end }}
diff --git a/charts/kueue/values.yaml b/charts/kueue/values.yaml
@@ -150,3 +150,73 @@ webhookService:
       protocol: TCP
       targetPort: 9443
   type: ClusterIP
+
+# kueue-viz dashboard
+kueueViz:
+  enabled: true
+  replicaCount: 1
+  backend:
+    image: us-central1-docker.pkg.dev/k8s-staging-images/kueue/kueue-viz-backend:latest
+    ingress:
+      enabled: true
+      host: backend.kueue-viz.local
+
+  frontend:
+    image: us-central1-docker.pkg.dev/k8s-staging-images/kueue/kueue-viz-frontend:latest
+    ingress:
+      enabled: true
+      host: frontend.kueue-viz.local
+
+  tls:
+    enabled: true
+    tlsSecretName: kueue-viz-tls-secret
+    cert: |
+      -----BEGIN CERTIFICATE-----
+      MIIDDzCCAfegAwIBAgIUb4IhecON6lZwwli6+pcA3YO9RWAwDQYJKoZIhvcNAQEL
+      BQAwMDEaMBgGA1UEAwwRa3ViZXJuZXRlcy1pc3N1ZXIxEjAQBgNVBAoMCUt1ZXVl
+      LVZpejAeFw0yNDEyMTYwNzQ5MjlaFw0yNTEyMTYwNzQ5MjlaMDAxGjAYBgNVBAMM
+      EWt1YmVybmV0ZXMtaXNzdWVyMRIwEAYDVQQKDAlLdWV1ZS1WaXowggEiMA0GCSqG
+      SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa/q+BFPohVtgoqn4U8oj1O6m3qZDN5TLx
+      3pHedagXweXKjDa9iX9FYeOhO7ME/x8Pk9IZKA9ykZlqAZ9p690ntMTNOXswxCAL
+      DZl02eOV5Hy3IkR3RmcE6Ot4BN8d2VlTugcoR9ACtBILGY3u/jRiJQplZRDScZtv
+      ajiTEoO7TfxXt/2tT0vkpmtsHkH/ZMPueH0Bqo8bkf45Ejs2i3qcbL//pH5sDfNi
+      rxP5xGpEJQmPFKS+E/DL4D6vSJEiYGY9Ca/JQ9pN3w26O7Whl2l+tZh+IJ9taUT0
+      0PveGjQZuW/EOoJ+tayzk3y1kGtfiJ4rCSmxvKabjRplf7INwP9VAgMBAAGjITAf
+      MB0GA1UdDgQWBBQ+IdI5M2Ade7rE5e4komki+ywyoDANBgkqhkiG9w0BAQsFAAOC
+      AQEAAE/L4YLD3oaF/KkAn74J8ViWOnsxnbbPa8xZG+BINt1T6N39owAMoHuigGjL
+      MY9bEkvL8wAbviv7uNEJIvrNK1uAAA8oxqKqoB1pEVB5rl1fopJHQ6dcqk1uidpH
+      R0Xa16L5fkK91JZQ5Cj9wKf0+t22Kz/D8tckQZzv8hDVBh9DejtZk2vd1hD7mf4e
+      LRWUm2BPtT++VzmQGglPAlbvBF+OlZjPVJeVhDn+xof8/UaVYZCXyHLua0s3F5LS
+      2RnzX7hPIMxSGg3Os5Z9vcPHbdfF/h6aSDdfUDN3YTv5AsKEkLsx/uhEt5fOK6Nk
+      UJhmJ0s0M0YZUxaeBWKfM0irKQ==
+      -----END CERTIFICATE-----
+
+    key: |
+      -----BEGIN PRIVATE KEY-----
+      MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCa/q+BFPohVtgo
+      qn4U8oj1O6m3qZDN5TLx3pHedagXweXKjDa9iX9FYeOhO7ME/x8Pk9IZKA9ykZlq
+      AZ9p690ntMTNOXswxCALDZl02eOV5Hy3IkR3RmcE6Ot4BN8d2VlTugcoR9ACtBIL
+      GY3u/jRiJQplZRDScZtvajiTEoO7TfxXt/2tT0vkpmtsHkH/ZMPueH0Bqo8bkf45
+      Ejs2i3qcbL//pH5sDfNirxP5xGpEJQmPFKS+E/DL4D6vSJEiYGY9Ca/JQ9pN3w26
+      O7Whl2l+tZh+IJ9taUT00PveGjQZuW/EOoJ+tayzk3y1kGtfiJ4rCSmxvKabjRpl
+      f7INwP9VAgMBAAECggEAA7faCvfaBkRjPBqBmswKArld2Wo9GeCxMlcwsExUmM6j
+      I2hDWeml/sqZ34DN9cU5qrHU8kXhP6eELXmrfYArK9bXenAyEdnqm4lF0KVMzd2P
+      gQSBQvaSkG4WqVLol/qM/N1eFZZ0xCkrXk53IVrCHpvyiLsoxlDztckFDBYqHdX4
+      BvGRnmHY6AnAihxfpbdGSzi6ixNXtp6M4mi133b0v+4625nBps2qOCczzzGWUpyT
+      SRn1RDRJeSIXpyXfGReaDaZUUPyJI7x+OEEED6j4psDm/Ter7FNZ0hGiRdL5iqLs
+      ICacPMbCQdh+JLHGVzTm6IqyWK23TOkfvYhwtFzuYQKBgQDRT69MKR40kVY+I51x
+      b+RMQyNVHjv4T3Q7wf6osJ38swBhiMXqJX9IrHvfqoLEXA95iAZ1fikvD2VMspGW
+      TtSXiHxjaPxFro8o+c1x9SXKF0c/6h5UVxwQMcOyEsBoSJU2WCnjxUpH1nyRNOoI
+      ++hmzi7ySGjeIlxcpi3YiC0MEQKBgQC9kV4dugNzc/1WNCLYao0xpuDStF1j6xfJ
+      2n9ZST8CSTn6yLp/c0/WPqqe+1w22XkY4wCp8dty4k0PsS8AbEAl42mdy5VQBoa/
+      iAZvM+NdZKCDYjXVhb43G+JvTpSnpmdgkkrL7cVTjykazVSOI89rQt0OnXNgRF0P
+      tT+8kdKTBQKBgEBKe4unLZHz+kuH4PpQ5gzOqnGgocb5kLgyNChYZ46Q5NMQkcoD
+      zn7iDAJ9e0EZDd/Eekdogvnjfrf6OWGzwPTyhVJ7ktFMdsidQg94vyy9zbLCFKLP
+      Rt1qi7OMsvDVKo/QsL03gkNijEyFtkUgKxg4yI6+0wc4AqqqmHZkDYIhAoGBAK5z
+      k7A5malq6Y2mJxcQX2V9FFLzhypHlDm/aQiq3mBlMQU4KmDVpngcbXonCcK0ObwM
+      U3URzQkZdx9kyENUW2hCstRzILJnfyPNs1Ys4yT0UL7352DbVqRyddxG7YinG2WE
+      2252Huz5xzMSGKlCDUTBYJttjFrgLuAgxUnszGNdAoGAW0MdGf3QqYCFiewEFrE6
+      KPdlSZahHuSC+iwCpd/Lyc5bFcL8dTIyoiZx0X+5oRKl9wlNdK9Ev9RLiMKbXv2C
+      dM7KG3dTvkIHXbn1cZt5+uLEyQh6YVDpYt1CLxiLj71xBaNBwOxSYWPU77+Be+gx
+      R1SRVLnwLH80GSo/wLbHois=
+      -----END PRIVATE KEY-----