github/intel-device-plugins-for-kubernetes
7
0
Fork 0
mirror of https://github.com/intel/intel-device-plugins-for-kubernetes.git synced 2025-06-03 03:59:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #659 from 0x161e-swei/sgx-nfd-operator-dependency

Browse Source 
Add SGX webhook operator as dependency of sgx-nfd
This commit is contained in:
Mikko Ylinen 2021-07-28 06:20:32 +03:00 committed by GitHub
commit cfe2d65f32
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
cmd/sgx_plugin/README.md
View File

@ -6,7 +6,7 @@ Contents
* [Installation](#installation) * [Installation](#installation)
* [Prerequisites](#prerequisites) * [Prerequisites](#prerequisites)
* [Backwards compatiblity note](#backwards-compatibility-note) * [Backwards compatiblity note](#backwards-compatibility-note)
* [Pre-built images](#pre-built-images) * [Deploying with Pre-built images](#deploying-with-pre-built-images)
* [Getting the source code](#getting-the-source-code) * [Getting the source code](#getting-the-source-code)
* [Verify node kubelet config](#verify-node-kubelet-config) * [Verify node kubelet config](#verify-node-kubelet-config)
* [Deploying as a DaemonSet](#deploying-as-a-daemonset) * [Deploying as a DaemonSet](#deploying-as-a-daemonset)
@ -102,7 +102,7 @@ The backwards compatibility will be removed in the next release (v0.20) and
from the main development branch once the SGX SDK and DCAP releases default to from the main development branch once the SGX SDK and DCAP releases default to
the new devices. the new devices.
### Pre-built images ### Deploying with Pre-built images
[Pre-built images](https://hub.docker.com/u/intel/) [Pre-built images](https://hub.docker.com/u/intel/)
are available on Docker Hub. These images are automatically built and uploaded are available on Docker Hub. These images are automatically built and uploaded
@ -157,8 +157,15 @@ $ git clone https://github.com/intel/intel-device-plugins-for-kubernetes ${INTEL
### Deploying as a DaemonSet ### Deploying as a DaemonSet
To deploy the plugin as a DaemonSet, you first need to build a container image for the plugin and To deploy the plugin as a DaemonSet, you first need to deploy the cert-manager.
ensure that is visible to your nodes.
```bash
$ kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.3.1/cert-manager.yaml
```
You also need to build a container image for the plugin and ensure that is
visible to your nodes.
#### Build the plugin and EPC source images #### Build the plugin and EPC source images
@ -259,7 +266,7 @@ For documentation to set up Intel® reference PCCS, refer to:
[Intel® Software Guard Extensions (Intel® SGX) Services](https://api.portal.trustedservices.intel.com/) and [Intel® Software Guard Extensions (Intel® SGX) Services](https://api.portal.trustedservices.intel.com/) and
[Intel® Software Guard Extensions SDK for Linux](https://01.org/intel-software-guard-extensions) [Intel® Software Guard Extensions SDK for Linux](https://01.org/intel-software-guard-extensions)
Furthermore, the Kubernetes cluster must be set up according the [instructions above](#pre-built-images). Furthermore, the Kubernetes cluster must be set up according the [instructions above](#deploying-with-pre-built-images).
##### Build the image ##### Build the image

1
deployments/sgx_plugin/overlays/epc-nfd/kustomization.yaml
View File

@ -1,5 +1,6 @@
bases: bases:
- ../../base - ../../base
- ../../../sgx_nfd - ../../../sgx_nfd
- ../../../sgx_admissionwebhook/overlays/default-with-certmanager
patches: patches:
- add-epc-nfd-initcontainer.yaml - add-epc-nfd-initcontainer.yaml