Merge branch 'main' into KF-6560-integrate-kfp-viz-rock-2.3

.github/workflows/integrate.yaml

@@ -169,7 +169,7 @@ jobs:
         run: |
           # Requires the model to be called kubeflow due to kfp-viewer
           juju add-model kubeflow
-          sg snap_microk8s -c "tox -e bundle-integration-${{ matrix.sdk }} -- --model kubeflow --bundle=./tests/integration/bundles/kfp_latest_edge.yaml.j2"
+          sg snap_microk8s -c "tox -e bundle-integration-${{ matrix.sdk }} -- --model kubeflow --bundle=./tests/integration/bundles/kfp_latest_edge.yaml.j2" --charmcraft-clean
 
       - name: Get all
         run: kubectl get all -A

CONTRIBUTING.md

@@ -12,6 +12,10 @@ KFP charms use Jinja2 templates in order to store manifests that are applied dur
 6. Build the manifest with `kustomize` (see step 4) and save the file
 7. Compare both files to spot the differences (e.g. using diff `diff kfp-manifests-vX.yaml kfp-manifests-vY.yaml > kfp-vX-vY.diff`)
 
+### Spot the updated images used by kfp-api
+
+Kfp-api uses also two images `launcher` and `driver` apart from its workload container one. Those are updated on every release but this change is not visible when comparing manifests. In order to update those, grab their sources from the corresponding comments in the [config.yaml](./charms/kfp-api/config.yaml) file and switch to the target version of that file. Then, use the new images to update the config options' default value. 
+
 ### Introduce changes
 
 Once the comparison is done, add any changes to the relevant aggregated ClusterRoles to the

charms/kfp-api/config.yaml

@@ -51,13 +51,13 @@ options:
     description: Default name of object storage bucket.
   launcher-image:
     type: string
-    # Source: https://github.com/kubeflow/pipelines/blob/2.2.0/backend/src/v2/compiler/argocompiler/container.go#L30
-    default: "gcr.io/ml-pipeline/kfp-launcher@sha256:8fe5e6e4718f20b021736022ad3741ddf2abd82aa58c86ae13e89736fdc3f08f"
+    # Source: https://github.com/kubeflow/pipelines/blob/2.3.0/backend/src/v2/compiler/argocompiler/container.go#L33
+    default: "gcr.io/ml-pipeline/kfp-launcher@sha256:bef55a344574a25c557256d7c66cb19edacfd2008d694e5b6bb5b612d59feae0"
     description: Launcher image used during a pipeline's steps.
   driver-image:
     type: string
-    # Source: https://github.com/kubeflow/pipelines/blob/2.2.0/backend/src/v2/compiler/argocompiler/container.go#L32
-    default: "gcr.io/ml-pipeline/kfp-driver@sha256:3c0665cd36aa87e4359a4c8b6271dcba5bdd817815cd0496ed12eb5dde5fd2ec"
+    # Source: https://github.com/kubeflow/pipelines/blob/2.3.0/backend/src/v2/compiler/argocompiler/container.go#L35
+    default: "gcr.io/ml-pipeline/kfp-driver@sha256:dc8b56a2eb071f30409828a8884d621092e68385af11a6c06aa9e9fbcfbb19de"
     description: Driver image used during a pipeline's steps.
   log-level:
     type: string

charms/kfp-api/metadata.yaml

@@ -15,7 +15,7 @@ resources:
   oci-image:
     type: oci-image
     description: Backing OCI image
-    upstream-source: charmedkubeflow/api-server:2.2.0-4d2f32c
+    upstream-source: gcr.io/ml-pipeline/api-server:2.3.0
 requires:
   mysql:
     interface: mysql

charms/kfp-api/src/templates/auth_manifests.yaml.j2

@@ -205,6 +205,7 @@ rules:
   - workflows/finalizers
   - workfloweventbindings
   - workflowtemplates
+  - workflowtaskresults
   verbs:
   - '*'
 ---

charms/kfp-metadata-writer/metadata.yaml

@@ -13,7 +13,7 @@ resources:
   oci-image:
     type: oci-image
     description: OCI image for KFP Metadata Writer
-    upstream-source: charmedkubeflow/metadata-writer:2.2.0-cff3205
+    upstream-source: gcr.io/ml-pipeline/metadata-writer:2.3.0
 requires:
   grpc:
     interface: k8s-service

charms/kfp-persistence/metadata.yaml

@@ -11,7 +11,7 @@ resources:
   oci-image:
     type: oci-image
     description: Backing OCI image
-    upstream-source: charmedkubeflow/persistenceagent:2.2.0-8af6d3c
+    upstream-source: gcr.io/ml-pipeline/persistenceagent:2.3.0
 requires:
   kfp-api:
     interface: k8s-service

charms/kfp-schedwf/metadata.yaml

@@ -11,7 +11,7 @@ resources:
   oci-image:
     type: oci-image
     description: Backing OCI image
-    upstream-source: charmedkubeflow/scheduledworkflow:2.2.0-517f00c
+    upstream-source: gcr.io/ml-pipeline/scheduledworkflow:2.3.0
 requires:
   logging:
     interface: loki_push_api

charms/kfp-ui/metadata.yaml

@@ -11,7 +11,7 @@ resources:
   ml-pipeline-ui:
     type: oci-image
     description: OCI image for ml-pipeline-ui
-    upstream-source: gcr.io/ml-pipeline/frontend:2.2.0
+    upstream-source: gcr.io/ml-pipeline/frontend:2.3.0
 requires:
   object-storage:
     interface: object-storage

charms/kfp-ui/src/charm.py

@@ -219,6 +219,7 @@ def __init__(self, *args):
                 ],
                 inputs_getter=lambda: MlPipelineUiInputs(
                     ALLOW_CUSTOM_VISUALIZATIONS=self.model.config["allow-custom-visualizations"],
+                    FRONTEND_SERVER_NAMESPACE=self.model.name,
                     HIDE_SIDENAV=self.model.config["hide-sidenav"],
                     MINIO_ACCESS_KEY=self.object_storage_relation.component.get_data()[
                         "access-key"

charms/kfp-ui/src/components/pebble_components.py

@@ -12,6 +12,7 @@ class MlPipelineUiInputs:
     """Defines the required inputs for MlPipelineUiPebbleService."""
 
     ALLOW_CUSTOM_VISUALIZATIONS: bool
+    FRONTEND_SERVER_NAMESPACE: str
     HIDE_SIDENAV: bool
     MINIO_ACCESS_KEY: str
     MINIO_SECRET_KEY: str
@@ -61,6 +62,7 @@ def get_layer(self) -> Layer:
                             "DISABLE_GKE_METADATA": "false",
                             "ENABLE_AUTHZ": "true",
                             "DEPLOYMENT": "KUBEFLOW",
+                            "FRONTEND_SERVER_NAMESPACE": inputs.FRONTEND_SERVER_NAMESPACE,
                             "HIDE_SIDENAV": str(inputs.HIDE_SIDENAV).lower(),
                             "HTTP_AUTHORIZATION_DEFAULT_VALUE": "",
                             "HTTP_AUTHORIZATION_KEY": "",

charms/kfp-viewer/metadata.yaml

@@ -12,7 +12,7 @@ resources:
   kfp-viewer-image:
     type: oci-image
     description: OCI image for KFP Viewer
-    upstream-source: charmedkubeflow/viewer-crd-controller:2.2.0-aaa1d41
+    upstream-source: gcr.io/ml-pipeline/viewer-crd-controller:2.3.0
 requires:
   logging:
     interface: loki_push_api

requirements-integration-v1.in

@@ -11,3 +11,4 @@ pytest
 pytest-operator
 pyyaml
 tenacity
+sh

requirements-integration-v1.txt

@@ -272,6 +272,8 @@ rich==13.7.1
     # via typer
 rsa==4.9
     # via google-auth
+sh==2.1.0
+    # via -r requirements-integration-v1.in
 shellingham==1.5.4
     # via typer
 six==1.16.0

tests/README.md

@@ -17,6 +17,7 @@ This directory has the following structure:
     ├── conftest.py
     ├── helpers
     │   ├── bundle_mgmt.py
+    │   ├── charmcraft.py
     │   ├── k8s_resources.py
     │   └── localize_bundle.py
     ├── kfp_globals.py
@@ -57,10 +58,11 @@ Communication with the KFP API happens using the KFP Python SDK. A `kfp.client`
 2. Run integration tests against the preferred bundle definition in `integration/bundles`
 
 ```
-tox -e bundle-integration -- --model kubeflow --bundle=./tests/integration/bundles/<bundle_template> <--no-build>
+tox -e bundle-integration -- --model kubeflow --bundle=./tests/integration/bundles/<bundle_template> <--no-build> <--charmcraft-clean>
 ```
 
 Where,
 * `--model` tells the testing framework which model to deploy charms to
 * `--bundle` is the path to a bundle template that's going to be used during the test execution
 * `--no-build` tells the test suite whether to build charms and run tests against them, or use charms in Charmhub
+* `--charmcraft-clean` tells the test suite whether to run `charmcraft clean` and delete the lxc instances after building the charms. If `--no-build` is passed, this has no effect.

tests/integration/conftest.py

@@ -105,3 +105,9 @@ def pytest_addoption(parser: Parser):
         "to render the bundle definition template."
         "If set to False, the integration tests will be run against charms in Charmhub.",
     )
+    parser.addoption(
+        "--charmcraft-clean",
+        action="store_true",
+        help="Whether to run charmcraft clean and delete lxc instances created by charmcraft."
+        "It defaults to False."
+    )

tests/integration/helpers/charmcraft.py

@@ -0,0 +1,23 @@
+import logging
+from os import chdir
+from pathlib import Path
+from typing import Dict
+
+from kfp_globals import basedir
+
+import sh
+
+log = logging.getLogger(__name__)
+
+
+def charmcraft_clean(charms_paths: Dict[str, Path]) -> None:
+    """
+    Run `charmcraft clean` for passed paths to charms.
+    """
+    pwd = sh.pwd()
+    for charm,charm_path in charms_paths.items():
+        log.info(f"Charmcraft clean {charm}")
+        chdir(charm_path)
+        sh.charmcraft.clean()
+    # Return to original directory so it doesn't affect tests execution
+    chdir(pwd)

tests/integration/test_kfp_functional_v1.py

@@ -9,6 +9,7 @@
 from helpers.bundle_mgmt import render_bundle, deploy_bundle
 from helpers.k8s_resources import apply_manifests, fetch_response
 from helpers.localize_bundle import get_resources_from_charm_file
+from helpers.charmcraft import charmcraft_clean
 from kfp_globals import (
     CHARM_PATH_TEMPLATE,
     KFP_CHARMS,
@@ -18,6 +19,7 @@
     SAMPLE_VIEWER,
 )
 
+import sh
 import kfp
 import lightkube
 import pytest
@@ -68,6 +70,7 @@ def create_and_clean_experiment_v1(kfp_client: kfp.Client):
 async def test_build_and_deploy(ops_test: OpsTest, request, lightkube_client):
     """Build and deploy kfp-operators charms."""
     no_build = request.config.getoption("no_build")
+    charmcraft_clean_flag = True if request.config.getoption("--charmcraft-clean") else False
 
     # Immediately raise an error if the model name is not kubeflow
     if ops_test.model_name != "kubeflow":
@@ -93,6 +96,9 @@ async def test_build_and_deploy(ops_test: OpsTest, request, lightkube_client):
             context.update([(f"{charm.replace('-', '_')}_resources", charm_resources)])
             context.update([(f"{charm.replace('-', '_')}", charm_file)])
 
+        if charmcraft_clean_flag == True:
+            charmcraft_clean(charms_to_build)
+
     # Render kfp-operators bundle file with locally built charms and their resources
     rendered_bundle = render_bundle(
         ops_test, bundle_path=bundlefile_path, context=context, no_build=no_build
@@ -101,16 +107,11 @@ async def test_build_and_deploy(ops_test: OpsTest, request, lightkube_client):
     # Deploy the kfp-operators bundle from the rendered bundle file
     await deploy_bundle(ops_test, bundle_path=rendered_bundle, trust=True)
 
-    # Wait for everything to be up.  Note, at time of writing these charms would naturally go
-    # into blocked during deploy while waiting for each other to satisfy relations, so we don't
-    # raise_on_blocked.
-    await ops_test.model.wait_for_idle(
-        status="active",
-        raise_on_blocked=False,  # These apps block while waiting for each other to deploy/relate
-        raise_on_error=True,
-        timeout=3600,
-        idle_period=30,
-    )
+    # Use `juju wait-for` instead of `wait_for_idle()`
+    # due to https://github.com/canonical/kfp-operators/issues/601
+    # and https://github.com/juju/python-libjuju/issues/1204
+    log.info("Waiting on model applications to be active")
+    sh.juju("wait-for","model","kubeflow", query="forEach(applications, app => app.status == 'active')", timeout="30m")
 
 
 # ---- KFP API Server focused test cases

tests/integration/test_kfp_functional_v2.py

@@ -9,6 +9,7 @@
 from helpers.bundle_mgmt import render_bundle, deploy_bundle
 from helpers.k8s_resources import apply_manifests, fetch_response
 from helpers.localize_bundle import get_resources_from_charm_file
+from helpers.charmcraft import charmcraft_clean
 from kfp_globals import (
     CHARM_PATH_TEMPLATE,
     KFP_CHARMS,
@@ -71,6 +72,7 @@ def create_and_clean_experiment_v2(kfp_client: kfp.Client):
 async def test_build_and_deploy(ops_test: OpsTest, request, lightkube_client):
     """Build and deploy kfp-operators charms."""
     no_build = request.config.getoption("no_build")
+    charmcraft_clean_flag = True if request.config.getoption("--charmcraft-clean") else False
 
     # Immediately raise an error if the model name is not kubeflow
     if ops_test.model_name != "kubeflow":
@@ -96,6 +98,9 @@ async def test_build_and_deploy(ops_test: OpsTest, request, lightkube_client):
             context.update([(f"{charm.replace('-', '_')}_resources", charm_resources)])
             context.update([(f"{charm.replace('-', '_')}", charm_file)])
 
+        if charmcraft_clean_flag == True:
+            charmcraft_clean(charms_to_build)
+
     # Render kfp-operators bundle file with locally built charms and their resources
     rendered_bundle = render_bundle(
         ops_test, bundle_path=bundlefile_path, context=context, no_build=no_build
@@ -104,17 +109,11 @@ async def test_build_and_deploy(ops_test: OpsTest, request, lightkube_client):
     # Deploy the kfp-operators bundle from the rendered bundle file
     await deploy_bundle(ops_test, bundle_path=rendered_bundle, trust=True)
 
-    # Wait for everything to be up.  Note, at time of writing these charms would naturally go
-    # into blocked during deploy while waiting for each other to satisfy relations, so we don't
-    # raise_on_blocked.
-    await ops_test.model.wait_for_idle(
-        status="active",
-        raise_on_blocked=False,  # These apps block while waiting for each other to deploy/relate
-        raise_on_error=True,
-        timeout=3600,
-        idle_period=30,
-    )
-
+    # Use `juju wait-for` instead of `wait_for_idle()`
+    # due to https://github.com/canonical/kfp-operators/issues/601
+    # and https://github.com/juju/python-libjuju/issues/1204
+    log.info("Waiting on model applications to be active")
+    sh.juju("wait-for","model","kubeflow", query="forEach(applications, app => app.status == 'active')", timeout="30m")
 
 # ---- KFP API Server focused test cases
 async def test_upload_pipeline(kfp_client):