Move web-app overlay files

Author: yuzisun

config/overlays/kubeflow/kustomization.yaml

@@ -0,0 +1,41 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+# Adds namespace to all resources.
+namespace: kubeflow
+
+# Labels to add to all resources and selectors.
+commonLabels:
+  app: kserve
+  app.kubernetes.io/name: kserve
+
+bases:
+- ../../default
+- web-app-authorization-policy.yaml
+
+patchesStrategicMerge:
+- patches/web-app-sidecar.yaml
+
+patchesJson6902:
+- target:
+    group: networking.istio.io
+    version: v1beta1
+    kind: VirtualService
+    name: kserve-models-web-app
+    namespace: kserve
+  path: patches/web-app-vsvc.yaml
+
+generatorOptions:
+  disableNameSuffixHash: true
+
+# To make namespace for standalone installation kustomizable,
+# variabalize ingress gateway, webhook service name and
+# kserve namespace in webhook configurations
+configMapGenerator:
+  - name: kserve-models-web-app-config
+    behavior: replace
+    literals:
+    - USERID_HEADER=kubeflow-userid
+
+configurations:
+- params.yaml

config/overlays/kubeflow/params.yaml

@@ -0,0 +1,4 @@
+commonLabels:
+- kind: AuthorizationPolicy
+  path: spec/selector/matchLabels
+  create: true

config/overlays/kubeflow/patches/web-app-sidecar.yaml

@@ -0,0 +1,10 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: kserve-models-web-app
+  namespace: kserve
+spec:
+  template:
+    metadata:
+      annotations:
+        sidecar.istio.io/inject: "true"

config/overlays/kubeflow/patches/web-app-vsvc.yaml

@@ -0,0 +1,6 @@
+- op: replace
+  path: /spec/http/0/route/0/destination
+  value:
+    host: kserve-models-web-app.kubeflow.svc.cluster.local
+    port:
+      number: 80

config/overlays/kubeflow/web-app-authorization-policy.yaml

@@ -0,0 +1,18 @@
+apiVersion: security.istio.io/v1beta1
+kind: AuthorizationPolicy
+metadata:
+  labels:
+    kustomize.component: kserve-models-web-app
+    app.kubernetes.io/component: kserve-models-web-app
+  name: kserve-models-web-app
+spec:
+  action: ALLOW
+  selector:
+    matchLabels:
+      kustomize.component: kserve-models-web-app
+      app.kubernetes.io/component: kserve-models-web-app
+  rules:
+  - from:
+    - source:
+        principals:
+        - cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account