Last Updated: 2026-04-06 Branch: staging (all phases complete, ready for merge to main) GitHub: peopleforrester/2026_Kubecon_Europe_CNCF_MLOps_Pipeline_Tutorial
All 7 phases from the senior review have been completed on the staging branch.
- Replaced 9
yourusername/cncf-mlops-pipelinerefs with actual GitHub path - Replaced placeholder Zoom/Calendar URLs with TBD markers
- SHA-pinned all actions across 6 workflow files
- Replaced compromised
aquasecurity/trivy-action@masterwith safe v0.35.0 SHA - Replaced deprecated
actions/create-release@v1withsoftprops/action-gh-release - Added
permissions:blocks to all workflows - Upgraded codecov v3->v5, codeql v2->v3, setup-kubectl v3->v4, build-push v5->v6
- Created 4 missing scripts (validate-setup, quick-start, push-model-to-harbor, remove-all)
- Fixed cost-analysis path, component directory references, tutorial listings
- Fixed QUICKSTART.md and getting-started/quickstart.md broken paths
- Updated all Volcano images from v1.9.0 to v1.11.0
- Added security contexts (runAsNonRoot, drop ALL, readOnlyRootFilesystem)
- Updated 5 scripts from
set -etoset -euo pipefail - Added HAMi privileged mode documentation
- Removed duplicate push triggers from individual CI workflows
- Created pyproject.toml with numpy, pandas, pyarrow, pytest
- Renamed Python files from hyphens to underscores for importability
- Fixed numpy 2.x, pandas 3.x, and datetime deprecation issues
- Added 32 unit tests (all passing)
- Created 6 kustomization.yaml files for all
kubectl apply -kreferences - Fixed misreferenced observability/opencost path
32/32 Python tests passing