Update images paths from ghcr.io/kubeflow/kubeflow/* to ghcr.io/kubeflow/dashboard/*

Yehudit Kerido · yehudit1987 · commit c53570df44e1 · 2025-08-12T12:20:06.000+03:00
Signed-off-by: Yehudit Kerido &lt;yehudit.kerido@nokia.com&gt;
diff --git a/.github/workflows/central_dashboard_angular_integration_test.yaml b/.github/workflows/central_dashboard_angular_integration_test.yaml
@@ -63,7 +63,7 @@ jobs:
         cd config
         kustomize build overlays/kubeflow \
           | sed "s|ghcr.io/kubeflow/kubeflow/profile-controller:[a-zA-Z0-9_.-]*|${PROFILE_CONTROLLER_IMG}:${TAG}|g" \
-          | sed "s|ghcr.io/kubeflow/kubeflow/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
+          | sed "s|ghcr.io/kubeflow/dashboard/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
           | kubectl apply -f -
         kubectl wait --for=condition=Available deployment -n kubeflow profiles-deployment --timeout=300s
         kubectl wait --for=condition=Ready pods -n kubeflow -l kustomize.component=profiles --timeout=300s
diff --git a/.github/workflows/central_dashboard_integration_test.yaml b/.github/workflows/central_dashboard_integration_test.yaml
@@ -63,7 +63,7 @@ jobs:
         cd config
         kustomize build overlays/kubeflow \
           | sed "s|ghcr.io/kubeflow/kubeflow/profile-controller:[a-zA-Z0-9_.-]*|${PROFILE_CONTROLLER_IMG}:${TAG}|g" \
-          | sed "s|ghcr.io/kubeflow/kubeflow/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
+          | sed "s|ghcr.io/kubeflow/dashboard/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
           | kubectl apply -f -
         kubectl wait --for=condition=Available deployment -n kubeflow profiles-deployment --timeout=300s
         kubectl wait --for=condition=Ready pods -n kubeflow -l kustomize.component=profiles --timeout=300s
diff --git a/.github/workflows/central_dashboard_multi_arch_test.yaml b/.github/workflows/central_dashboard_multi_arch_test.yaml
@@ -14,7 +14,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  IMG: ghcr.io/kubeflow/kubeflow/central-dashboard
+  IMG: ghcr.io/kubeflow/dashboard/central-dashboard
 
 jobs:
   build:
diff --git a/.github/workflows/central_dashboard_oci_publish.yaml b/.github/workflows/central_dashboard_oci_publish.yaml
@@ -10,7 +10,7 @@ on:
       - .github/workflows/central_dashboard_oci_publish.yaml
 
 env:
-  IMG: ghcr.io/kubeflow/kubeflow/central-dashboard
+  IMG: ghcr.io/kubeflow/dashboard/central-dashboard
   ARCH: linux/amd64,linux/ppc64le,linux/arm64/v8
 
 jobs:
diff --git a/.github/workflows/end_to_end_integration_test.yaml b/.github/workflows/end_to_end_integration_test.yaml
@@ -68,7 +68,7 @@ jobs:
         cd config
         kustomize build overlays/kubeflow \
           | sed "s|ghcr.io/kubeflow/kubeflow/profile-controller:[a-zA-Z0-9_.-]*|${PROFILE_CONTROLLER_IMG}:${TAG}|g" \
-          | sed "s|ghcr.io/kubeflow/kubeflow/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
+          | sed "s|ghcr.io/kubeflow/dashboard/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
           | kubectl apply -f -
         kubectl wait --for=condition=Ready pods -n kubeflow -l kustomize.component=profiles --timeout=300s
         kubectl wait --for=condition=Available deployment -n kubeflow profiles-deployment --timeout=300s
diff --git a/.github/workflows/kfam_multi_arch_test.yaml b/.github/workflows/kfam_multi_arch_test.yaml
@@ -14,7 +14,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  IMG: ghcr.io/kubeflow/kubeflow/kfam
+  IMG: ghcr.io/kubeflow/dashboard/kfam
 
 jobs:
   build:
diff --git a/.github/workflows/kfam_oci_publish.yaml b/.github/workflows/kfam_oci_publish.yaml
@@ -9,7 +9,7 @@ on:
       - releasing/version/VERSION
 
 env:
-  IMG: ghcr.io/kubeflow/kubeflow/kfam
+  IMG: ghcr.io/kubeflow/dashboard/kfam
   ARCH: linux/amd64,linux/ppc64le,linux/arm64/v8
 
 jobs:
diff --git a/.github/workflows/poddefaults_intergration_test.yaml b/.github/workflows/poddefaults_intergration_test.yaml
@@ -14,7 +14,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  IMG: ghcr.io/kubeflow/kubeflow/poddefaults-webhook
+  IMG: ghcr.io/kubeflow/dashboard/poddefaults-webhook
   TAG: integration-test
 
 jobs:
diff --git a/.github/workflows/poddefaults_multi_arch_test.yaml b/.github/workflows/poddefaults_multi_arch_test.yaml
@@ -14,7 +14,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  IMG: ghcr.io/kubeflow/kubeflow/poddefaults-webhook
+  IMG: ghcr.io/kubeflow/dashboard/poddefaults-webhook
 
 jobs:
   build:
diff --git a/.github/workflows/poddefaults_oci_publish.yaml b/.github/workflows/poddefaults_oci_publish.yaml
@@ -10,7 +10,7 @@ on:
       - .github/workflows/poddefaults_oci_publish.yaml
 
 env:
-  IMG: ghcr.io/kubeflow/kubeflow/poddefaults-webhook
+  IMG: ghcr.io/kubeflow/dashboard/poddefaults-webhook
   ARCH: linux/amd64,linux/ppc64le,linux/arm64/v8
 
 jobs:
diff --git a/.github/workflows/profiles_kfam_integration_test.yaml b/.github/workflows/profiles_kfam_integration_test.yaml
@@ -54,7 +54,7 @@ jobs:
         cd config
         kustomize build overlays/kubeflow \
           | sed "s|ghcr.io/kubeflow/kubeflow/profile-controller:[a-zA-Z0-9_.-]*|${PROFILE_IMG}:${TAG}|g" \
-          | sed "s|ghcr.io/kubeflow/kubeflow/kfam:[a-zA-Z0-9_.-]*|ghcr.io/kubeflow/kubeflow/kfam:latest|g" \
+          | sed "s|ghcr.io/kubeflow/dashboard/kfam:[a-zA-Z0-9_.-]*|ghcr.io/kubeflow/dashboard/kfam:latest|g" \
           | kubectl apply -f -
 
     - name: Wait for Profile Controller to be Ready
@@ -88,7 +88,7 @@ jobs:
         cd components/profile-controller/config
         kustomize build overlays/kubeflow \
           | sed "s|ghcr.io/kubeflow/kubeflow/profile-controller:[a-zA-Z0-9_.-]*|${PROFILE_IMG}:${TAG}|g" \
-          | sed "s|ghcr.io/kubeflow/kubeflow/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
+          | sed "s|ghcr.io/kubeflow/dashboard/kfam:[a-zA-Z0-9_.-]*|${KFAM_IMG}:${TAG}|g" \
           | kubectl apply -f -
         kubectl wait --for=condition=Ready pods -n kubeflow -l kustomize.component=profiles --timeout=300s
         kubectl wait --for=condition=Available deployment -n kubeflow profiles-deployment --timeout=300s
diff --git a/components/access-management/Makefile b/components/access-management/Makefile
@@ -4,7 +4,7 @@ GO_SWAGGER_URL ?= https://github.com/go-swagger/go-swagger/releases/download/v0.
 
 GIT_VERSION := $(shell git describe --tags --always --dirty)
 
-IMG ?= ghcr.io/kubeflow/kubeflow/kfam
+IMG ?= ghcr.io/kubeflow/dashboard/kfam
 TAG ?= $(GIT_VERSION)
 ARCH ?= linux/amd64
 generate-go-client: bin/swagger
diff --git a/components/admission-webhook/Makefile b/components/admission-webhook/Makefile
@@ -1,5 +1,5 @@
 # Image URL to use all building/pushing image targets
-IMG ?= ghcr.io/kubeflow/kubeflow/poddefaults-webhook
+IMG ?= ghcr.io/kubeflow/dashboard/poddefaults-webhook
 TAG ?= $(shell git describe --tags --always --dirty)
 ARCH ?= linux/amd64
 # Get the currently used golang install path (in GOPATH/bin, unless GOBIN is set)
diff --git a/components/admission-webhook/manifests/base/deployment.yaml b/components/admission-webhook/manifests/base/deployment.yaml
@@ -9,7 +9,7 @@ spec:
         sidecar.istio.io/inject: "false"
     spec:
       containers:
-      - image: ghcr.io/kubeflow/kubeflow/poddefaults-webhook
+      - image: ghcr.io/kubeflow/dashboard/poddefaults-webhook
         name: admission-webhook
         volumeMounts:
         - mountPath: /etc/webhook/certs
diff --git a/components/admission-webhook/manifests/base/kustomization.yaml b/components/admission-webhook/manifests/base/kustomization.yaml
@@ -9,8 +9,8 @@ resources:
 - service.yaml
 - crd.yaml
 images:
-- name: ghcr.io/kubeflow/kubeflow/poddefaults-webhook
-  newName: ghcr.io/kubeflow/kubeflow/poddefaults-webhook
+- name: ghcr.io/kubeflow/dashboard/poddefaults-webhook
+  newName: ghcr.io/kubeflow/dashboard/poddefaults-webhook
   newTag: latest
 namespace: kubeflow
 generatorOptions:
diff --git a/components/centraldashboard/Makefile b/components/centraldashboard/Makefile
@@ -1,4 +1,4 @@
-IMG ?= ghcr.io/kubeflow/kubeflow/central-dashboard
+IMG ?= ghcr.io/kubeflow/dashboard/central-dashboard
 TAG ?= $(shell git describe --tags --always --dirty)
 COMMIT = $(shell git rev-parse HEAD)
 DOCKERFILE ?= Dockerfile
diff --git a/components/centraldashboard/manifests/base/deployment.yaml b/components/centraldashboard/manifests/base/deployment.yaml
@@ -14,10 +14,12 @@ spec:
       labels:
         app: centraldashboard
         sidecar.istio.io/inject: "true"
+      annotations:
+        sidecar.istio.io/rewriteAppHTTPProbers: "true"
     spec:
       containers:
       - name: centraldashboard
-        image: ghcr.io/kubeflow/kubeflow/central-dashboard
+        image: ghcr.io/kubeflow/dashboard/central-dashboard
         imagePullPolicy: IfNotPresent
         livenessProbe:
           httpGet:
diff --git a/components/centraldashboard/manifests/base/kustomization.yaml b/components/centraldashboard/manifests/base/kustomization.yaml
@@ -11,8 +11,8 @@ resources:
 - service.yaml
 - configmap.yaml
 images:
-- name: ghcr.io/kubeflow/kubeflow/central-dashboard
-  newName: ghcr.io/kubeflow/kubeflow/central-dashboard
+- name: ghcr.io/kubeflow/dashboard/central-dashboard
+  newName: ghcr.io/kubeflow/dashboard/central-dashboard
   newTag: latest
 configMapGenerator:
 - envs:
diff --git a/components/centraldashboard/manifests/overlays/istio/authorizationpolicy.yaml b/components/centraldashboard/manifests/overlays/istio/authorizationpolicy.yaml
@@ -9,6 +9,7 @@ spec:
         - source:
             principals:
               - cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account
+              - cluster.local/ns/kubeflow/sa/centraldashboard
   selector:
     matchLabels:
       app: centraldashboard
diff --git a/components/profile-controller/config/manager/manager.yaml b/components/profile-controller/config/manager/manager.yaml
@@ -45,4 +45,4 @@ spec:
           periodSeconds: 10
         ports:
         - containerPort: 9876
-      serviceAccountName: controller-manager
+      serviceAccountName: controller-service-account
diff --git a/components/profile-controller/config/overlays/kubeflow/kustomization.yaml b/components/profile-controller/config/overlays/kubeflow/kustomization.yaml
@@ -27,6 +27,6 @@ vars:
     apiVersion: v1
 
 images:
-- name: ghcr.io/kubeflow/kubeflow/kfam
-  newName: ghcr.io/kubeflow/kubeflow/kfam
+- name: ghcr.io/kubeflow/dashboard/kfam
+  newName: ghcr.io/kubeflow/dashboard/kfam
   newTag: latest
diff --git a/components/profile-controller/config/overlays/kubeflow/patches/kfam.yaml b/components/profile-controller/config/overlays/kubeflow/patches/kfam.yaml
@@ -7,6 +7,8 @@ spec:
     metadata:
       labels:
         sidecar.istio.io/inject: "true"
+      annotations:
+        sidecar.istio.io/rewriteAppHTTPProbers: "true"
     spec:
       securityContext:
         seccompProfile:
@@ -23,7 +25,7 @@ spec:
         envFrom:
           - configMapRef:
               name: config
-        image: ghcr.io/kubeflow/kubeflow/kfam
+        image: ghcr.io/kubeflow/dashboard/kfam
         imagePullPolicy: IfNotPresent
         name: kfam
         livenessProbe:
diff --git a/components/profile-controller/config/rbac/role_binding.yaml b/components/profile-controller/config/rbac/role_binding.yaml
@@ -9,3 +9,4 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: controller-service-account
+  namespace: kubeflow
