Skip to content

[major] FVT Implement Workflow for Saas AI Services#2310

Open
joshiricha444 wants to merge 252 commits into
masterfrom
gitops-fvt-aiservice
Open

[major] FVT Implement Workflow for Saas AI Services#2310
joshiricha444 wants to merge 252 commits into
masterfrom
gitops-fvt-aiservice

Conversation

@joshiricha444
Copy link
Copy Markdown
Contributor

@joshiricha444 joshiricha444 commented May 25, 2026

Jira

MASAIB-2258

Description

This PR adds support for FVT environments in AI Service SaaS deployments.
FVT environments need to deploy AI Service instances as standalone application.

Testing Resluts:

Testing results includes succesful pipeline runs for the aiservice pipeline, aiservice instance and tenant level pipelines.

Screenshot 2026-05-25 at 6 07 40 PM Screenshot 2026-05-25 at 6 09 29 PM Screenshot 2026-05-25 at 6 10 20 PM Screenshot 2026-05-25 at 6 11 26 PM

@joshiricha444 joshiricha444 changed the title FVT Implement Workflow for Saas AI Services [major] FVT Implement Workflow for Saas AI Services May 25, 2026
@joshiricha444 joshiricha444 marked this pull request as ready for review May 25, 2026 14:04
@joshiricha444 joshiricha444 requested a review from a team as a code owner May 25, 2026 14:04
# Skip DRO, S3, and JDBC secret validation in FVT environments
# These secrets will be created by postSync jobs after deployment
if [[ "${IS_GITOPS_FVT_ENV}" != "true" ]]; then
sm_verify_secret_exists ${SECRETS_PREFIX}ibm_entitlement "image_pull_secret_b64,entitlement_key"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The entitlement_key secret is being skipped when not in FVT. Is this one not required for pulling images?

sm_verify_secret_exists ${SECRETS_PREFIX}s3 "sm_s3_accesskey,sm_s3_secretkey,sm_s3_host,sm_s3_region"
sm_verify_secret_exists ${SECRETS_PREFIX}jdbc "jdbccfg_username,jdbccfg_password,jdbccfg_url,jdbccfg_sslenabled,jdbccfg_ca_b64enc"
else
echo "IS_GITOPS_FVT_ENV is true - Skipping DRO, S3, and JDBC secret validation"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It would be useful to explain why we do this in the PR description and/or a comment here in the code.

@@ -0,0 +1,253 @@
#!/usr/bin/env bash
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How is this KModel deprovisioning related to FVT? Can we remove this?

--sm-aws-secret-region ${TEXT_RESET}SM_AWS_REGION${TEXT_RESET} AWS Region
--sm-aws-access-key ${TEXT_RESET}SM_AWS_ACCESS_KEY${TEXT_RESET} AWS Access key ID
--sm-aws-secret-key ${TEXT_RESET}SM_AWS_SECRET_ACCESS_KEY${TEXT_RESET} AWS Secreat Access key ID
-i, --aiservice-instance-id ${COLOR_YELLOW}AISERVICE_INSTANCE_ID${TEXT_RESET} AI Service instance ID
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How is ODH deprovisioning related to FVT? Can we remove this change?

@@ -0,0 +1,452 @@
#!/usr/bin/env bash

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as above. Can we remove this?

@@ -122,7 +122,13 @@ function gitops_odh_noninteractive() {
export ODH_OPERATOR_VERSION="${ODH_OPERATOR_VERSION:-"opendatahub-operator.v2.19.0"}"
export ODH_NAMESPACE="${ODH_NAMESPACE:-"opendatahub"}"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as above. Can we remove this?

@@ -0,0 +1,49 @@
merge-key: "{{ ACCOUNT_ID }}/{{ CLUSTER_ID }}/{{ AISERVICE_INSTANCE_ID }}"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as above. Can we remove this?

aiservice_namespace: {{ AISERVICE_NAMESPACE }}
pull_secret_name: "<path:{{ SECRETS_PATH }}:{{ SECRET_KEY_IMAGE_PULL_SECRET_B64 }}>"

# ODH Pipeline operator
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as above. Can we remove this?

Comment thread image/cli/mascli/mas
gitops
;;

gitops-kmodel)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as above. Can we remove this?

@@ -0,0 +1,192 @@
---
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is deprovisioning of AI Service needed for FVT? Can we remove this?

@@ -124,45 +124,6 @@ spec:
- name: configs
workspace: configs
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why are we editing the MAS deprovisioning. Can we remove this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants