mirror of
https://github.com/intel/intel-device-plugins-for-kubernetes.git
synced 2025-06-03 03:59:37 +00:00
demo: IAA/DSA: deploy with SYS_RAWIO capabilities
stable kernel update added a patch that requires processes to carry SYS_RAWIO in order to submit IAA/DSA commands. This isn't enabled for containers by default so explicitly request adding it for test deployments. Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
This commit is contained in:
parent
2423ce4e67
commit
24fe81ee9f
@ -17,6 +17,9 @@ spec:
|
|||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
dsa.intel.com/wq-user-dedicated: 1
|
dsa.intel.com/wq-user-dedicated: 1
|
||||||
# In kernels 5.13-5.17, ENQCMD is disabled (is to be reinstated in 5.18)
|
|
||||||
# dsa.intel.com/wq-user-shared: 1
|
# dsa.intel.com/wq-user-shared: 1
|
||||||
|
securityContext:
|
||||||
|
capabilities:
|
||||||
|
add:
|
||||||
|
["SYS_RAWIO"]
|
||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
|
@ -17,6 +17,9 @@ spec:
|
|||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
iaa.intel.com/wq-user-dedicated: 1
|
iaa.intel.com/wq-user-dedicated: 1
|
||||||
# In kernels 5.13-5.17, ENQCMD is disabled (is to be reinstated in 5.18)
|
|
||||||
# iaa.intel.com/wq-user-shared: 1
|
# iaa.intel.com/wq-user-shared: 1
|
||||||
|
securityContext:
|
||||||
|
capabilities:
|
||||||
|
add:
|
||||||
|
["SYS_RAWIO"]
|
||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
|
Loading…
Reference in New Issue
Block a user