Kubeflow Platform (Manifests & Security WG) roadmap for KF 1.10.1 / 1.11.0

[juliusvonkohout]

There is also a milestone: https://github.com/kubeflow/manifests/milestone/2

Tracker for 1.10.1 / 1.11.0 @kimwnasptd @varodrig
Follow up of #2763

We are looking for volunteers, so please reach out if you want to help.

Organizational:

• Use the new CNCF Zoom account for the platform meeting #2783
• Kserve web application: can you help with rebasing/forking the 5 PRs here and merging them https://github.com/kserve/models-web-app/pulls. We also need someone to go trough https://github.com/kserve/models-web-app/issues and close or confirm whether they are still valid.

Security external:

• Revive and merge the closed WIP: feat(frontend, backend): Delete python visualization server pipelines#11134
• [backend] Security exploit in mlpipeline-UI pipelines#9889
• [feature] Seek alternative for object store solution other than MinIO pipelines#7878
• feat(backend): isolate artifacts per namespace/profile/user using only one bucket pipelines#7725
• [Multi User] Support separate metadata for each namespace pipelines#4790

Performance / Denial of service:

• web-apps: Implement watch to avoid constant polling from backend to K8s kubeflow#7080
• Kubeflow Notebooks 2.0 (Kubeflow Workspaces) notebooks#85 a single bad CR can kill the controller of v1 Workbenches
• Notebook Culling for VSCode/CodeServer style notebooks notebooks#93
• NOT SOLVED Support big (5+ GB) s3 artifacts in pipelines EOF when many steps using same big input artifact argoproj/argo-workflows#9525 and Download large file from S3 cause memory rise in the init container argoproj/argo-workflows#1322 (they are not solved)

Rootless Kubeflow & Istio:

• Rootless Kubeflow #2528
• Make istio CNI the default and set the kserve-needed annotation across all Pods. ISTIO CNI by default #2907
• Istio Ambient support #2676

Rest:

• [bug] v1 Metrics not working in KFP 2.2.0 pipelines#10988
• feat: allow updating profile owners kubeflow#7547

[juliusvonkohout]

CC @varodrig @tarekabouzeid @rimolive @kimwnasptd

[milinddethe15]

@juliusvonkohout Is there somewhere I can help?

[juliusvonkohout]

@juliusvonkohout Is there somewhere I can help?

@milinddethe15 I think

Reviving, foking rebasing kubeflow/pipelines#11134 is a good start.

Or a more demanding but important one kubeflow/pipelines#9889

[ViciousEagle03]

@juliusvonkohout I've been exploring Istio, especially Istio CNI. Are there any Istio-related tasks that would be a good starting point for me to help out? I've been going over the requirements and code in #2907 and #2676 to get a better sense of the workflow.

[milinddethe15]

Reviving, foking rebasing kubeflow/pipelines#11134 is a good start.

Already WIP: kubeflow/pipelines#11724

[juliusvonkohout]

Reviving, foking rebasing kubeflow/pipelines#11134 is a good start.

Already WIP: kubeflow/pipelines#11724

then #2991 is a hot candidate, because it can be worked on in parallel.