Kubeflow Platform (Manifests & Security WG) roadmap for KF 1.12

[juliusvonkohout]

There is also a milestone: https://github.com/kubeflow/manifests/milestone/2

Tracker for 1.10.1 / 1.11.0 @kimwnasptd @varodrig
Follow up of #2763

We are looking for volunteers, so please reach out if you want to help.

Security external:

• [backend] Security exploit in mlpipeline-UI pipelines#9889
• [Multi User] Support separate metadata for each namespace pipelines#4790

Performance / Denial of service:

• web-apps: Implement watch to avoid constant polling from backend to K8s kubeflow#7080
• Kubeflow Notebooks 2.0 (Kubeflow Workspaces) notebooks#85 a single bad CR can kill the controller of v1 Workbenches
• NOT SOLVED Support big (5+ GB) s3 artifacts in pipelines EOF when many steps using same big input artifact argoproj/argo-workflows#9525 and Download large file from S3 cause memory rise in the init container argoproj/argo-workflows#1322 (they are not solved)

Rootless Kubeflow & Istio:

• Rootless Kubeflow #2528
• Istio Ambient support #2676

Rest:

• [bug] v1 Metrics not working in KFP 2.2.0 pipelines#10988
• feat: allow updating profile owners kubeflow#7547

[juliusvonkohout]

CC @varodrig @tarekabouzeid @rimolive @kimwnasptd

[milinddethe15]

@juliusvonkohout Is there somewhere I can help?

[juliusvonkohout]

@juliusvonkohout Is there somewhere I can help?

@milinddethe15 I think

Reviving, foking rebasing kubeflow/pipelines#11134 is a good start.

Or a more demanding but important one kubeflow/pipelines#9889

[ViciousEagle03]

@juliusvonkohout I've been exploring Istio, especially Istio CNI. Are there any Istio-related tasks that would be a good starting point for me to help out? I've been going over the requirements and code in #2907 and #2676 to get a better sense of the workflow.

[milinddethe15]

Reviving, foking rebasing kubeflow/pipelines#11134 is a good start.

Already WIP: kubeflow/pipelines#11724

[juliusvonkohout]

Reviving, foking rebasing kubeflow/pipelines#11134 is a good start.

Already WIP: kubeflow/pipelines#11724

then #2991 is a hot candidate, because it can be worked on in parallel.