Merge pull request #1441 from tkatila/release-0.27-prep

Release 0.27 creation

.github/workflows/publish.yml

@@ -4,9 +4,9 @@ on:
   push:
     branches:
         - main
-        - release-0.24
         - release-0.25
         - release-0.26
+        - release-0.27
 
 permissions:
   contents: read
@@ -44,17 +44,6 @@ jobs:
         rm -rf _work/venv
         make vhtml
         mv _build/html/* $HOME/output/
-    - uses: actions/checkout@v3
-      with:
-        fetch-depth: 0
-        ref: release-0.24
-    - name: Build release-0.24
-      run: |
-        GITHUB_SHA=$(git rev-parse HEAD)
-        export GITHUB_SHA
-        rm -rf _work/venv
-        make vhtml
-        mv _build/html $HOME/output/0.24
     - uses: actions/checkout@v3
       with:
         fetch-depth: 0
@@ -77,6 +66,17 @@ jobs:
         rm -rf _work/venv
         make vhtml
         mv _build/html $HOME/output/0.26
+    - uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+        ref: release-0.27
+    - name: Build release-0.27
+      run: |
+        GITHUB_SHA=$(git rev-parse HEAD)
+        export GITHUB_SHA
+        rm -rf _work/venv
+        make vhtml
+        mv _build/html $HOME/output/0.27
     - name: Deploy the docs
       shell: bash
       env:

Jenkinsfile

@@ -142,7 +142,7 @@ pipeline {
         stage('make test-with-kind') {
           steps {
             dir(path: "$REPO_DIR") {
-              sh "make test-with-kind REG=intel/ TAG=devel"
+              sh "make test-with-kind REG=intel/ TAG=0.27.0"
             }
           }
         }

Makefile

@@ -136,7 +136,7 @@ clean:
 
 ORG?=intel
 REG?=$(ORG)/
-TAG?=devel
+TAG?=0.27.0
 export TAG
 
 e2e-fpga:

README.md

@@ -7,8 +7,8 @@ This repository contains a framework for developing plugins for the Kubernetes
 [device plugins framework](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/),
 along with a number of device plugin implementations utilizing that framework.
 
-The [v0.26 release](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/latest)
+The [v0.27 release](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/latest)
-is the latest feature release with its documentation available [here](https://intel.github.io/intel-device-plugins-for-kubernetes/0.26/).
+is the latest feature release with its documentation available [here](https://intel.github.io/intel-device-plugins-for-kubernetes/0.27/).
 
 Table of Contents
 
@@ -166,10 +166,10 @@ as a standalone [SGX Admission webhook image](cmd/sgx_admissionwebhook/README.md
 #### Intel SGX EPC memory registration
 
 The Intel SGX EPC memory available on each node is registered as a Kubernetes extended resource using
-node-feature-discovery (NFD). A custom NFD source hook is installed as part of
+node-feature-discovery (NFD). An NFD Node Feature Rule is installed as part of
 [SGX device plugin](cmd/sgx_plugin/README.md)
 operator deployment and NFD is configured to register the Intel SGX EPC memory
-extended resource reported by the hook.
+extended resource.
 
 Containers requesting Intel SGX EPC resources in the cluster use
 `sgx.intel.com/epc` resource which is of
@@ -262,9 +262,10 @@ matching Kubernetes versions are listed below:
 
 | Branch            | Kubernetes branch/version      | Status      |
 |:------------------|:-------------------------------|:------------|
+| release-0.27      | Kubernetes 1.27 branch v1.27.x | supported   |
 | release-0.26      | Kubernetes 1.26 branch v1.26.x | supported   |
 | release-0.25      | Kubernetes 1.25 branch v1.25.x | supported   |
-| release-0.24      | Kubernetes 1.24 branch v1.24.x | supported   |
+| release-0.24      | Kubernetes 1.24 branch v1.24.x | unsupported |
 | release-0.23      | Kubernetes 1.23 branch v1.23.x | unsupported |
 | release-0.22      | Kubernetes 1.22 branch v1.22.x | unsupported |
 | release-0.21      | Kubernetes 1.21 branch v1.21.x | unsupported |

build/docker/intel-deviceplugin-operator.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_deviceplugin_operator"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-deviceplugin-operator'
 LABEL summary='Intel® device plugin operator for Kubernetes'

build/docker/intel-dlb-initcontainer.Dockerfile

@@ -55,7 +55,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
 ###
 FROM ${FINAL_BASE}
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 COPY --from=builder /install_root /
 COPY demo/dlb-init.sh /usr/local/bin/

build/docker/intel-dlb-plugin.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_dlb_device_plugin"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-dlb-plugin'
 LABEL summary='Intel® DLB device plugin for Kubernetes'

build/docker/intel-dsa-plugin.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_dsa_device_plugin"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-dsa-plugin'
 LABEL summary='Intel® DSA device plugin for Kubernetes'

build/docker/intel-fpga-admissionwebhook.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_fpga_admissionwebhook"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-fpga-admissionwebhook'
 LABEL summary='Intel® FPGA admission controller webhook for Kubernetes'

build/docker/intel-fpga-initcontainer.Dockerfile

@@ -86,7 +86,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
 ###
 FROM ${FINAL_BASE}
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-fpga-initcontainer'
 LABEL summary='Intel® FPGA programming CRI hook for Kubernetes'

build/docker/intel-fpga-plugin.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_fpga_device_plugin"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-fpga-plugin'
 LABEL summary='Intel® FPGA device plugin for Kubernetes'

build/docker/intel-gpu-fakedev.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_gpu_fakedev"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-gpu-fakedev'
 LABEL summary='Fake device file generator for Intel® GPU plugin'

build/docker/intel-gpu-initcontainer.Dockerfile

@@ -69,7 +69,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
 ###
 FROM ${FINAL_BASE}
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-gpu-initcontainer'
 LABEL summary='Intel® GPU NFD hook for Kubernetes'

build/docker/intel-gpu-plugin.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_gpu_device_plugin"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-gpu-plugin'
 LABEL summary='Intel® GPU device plugin for Kubernetes'

build/docker/intel-iaa-plugin.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_iaa_device_plugin"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-iaa-plugin'
 LABEL summary='Intel® IAA device plugin for Kubernetes'

build/docker/intel-qat-initcontainer.Dockerfile

@@ -55,7 +55,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
 ###
 FROM ${FINAL_BASE}
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-qat-initcontainer'
 LABEL summary='Intel® QAT initcontainer for Kubernetes'

build/docker/intel-qat-plugin-kerneldrv.Dockerfile

@@ -57,7 +57,7 @@ RUN install -D ${DIR}/LICENSE /install_root/licenses/intel-device-plugins-for-ku
     else mkdir -p /install_root/licenses/$CMD/go-licenses/ && cd licenses/$CMD && cp -r * /install_root/licenses/$CMD/go-licenses/ ; fi
 FROM debian:unstable-slim
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-qat-plugin-kerneldrv'
 LABEL summary='Intel® QAT device plugin kerneldrv for Kubernetes'

build/docker/intel-qat-plugin.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_qat_device_plugin"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-qat-plugin'
 LABEL summary='Intel® QAT device plugin for Kubernetes'

build/docker/intel-sgx-admissionwebhook.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_sgx_admissionwebhook"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-sgx-admissionwebhook'
 LABEL summary='Intel® SGX admission controller webhook for Kubernetes'

build/docker/intel-sgx-initcontainer.Dockerfile

@@ -69,7 +69,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
 ###
 FROM ${FINAL_BASE}
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-sgx-initcontainer'
 LABEL summary='Intel® SGX NFD hook for Kubernetes'

build/docker/intel-sgx-plugin.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_sgx_device_plugin"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-sgx-plugin'
 LABEL summary='Intel® SGX device plugin for Kubernetes'

build/docker/intel-vpu-plugin.Dockerfile

@@ -55,7 +55,7 @@ RUN install -D ${DIR}/LICENSE /install_root/licenses/intel-device-plugins-for-ku
     else mkdir -p /install_root/licenses/$CMD/go-licenses/ && cd licenses/$CMD && cp -r * /install_root/licenses/$CMD/go-licenses/ ; fi
 FROM debian:unstable-slim
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-vpu-plugin'
 LABEL summary='Intel® VPU device plugin for Kubernetes'

build/docker/intel-xpumanager-sidecar.Dockerfile

@@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
 COPY --from=builder /install_root /
 ENTRYPOINT ["/usr/local/bin/intel_xpumanager_sidecar"]
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'
 LABEL name='intel-xpumanager-sidecar'
 LABEL summary='Intel® xpumanager sidecar'

build/docker/lib/default_labels.docker

@@ -1,3 +1,3 @@
 LABEL vendor='Intel®'
-LABEL version='devel'
+LABEL version='0.27.0'
 LABEL release='1'

cmd/sgx_plugin/README.md

@@ -19,7 +19,7 @@ Table of Contents
 The Intel SGX device plugin and related components allow workloads to use Intel SGX on
 platforms with SGX Flexible Launch Control enabled, e.g.,:
 
-- 3rd Generation Intel® Xeon® Scalable Platform, code-named “Ice Lake”
+- 3rd/4th Generation Intel® Xeon® Scalable Platforms
 - Intel® Xeon® E3
 - Intel® NUC Kit NUC7CJYH
 
@@ -122,7 +122,7 @@ $ kubectl apply -k 'https://github.com/intel/intel-device-plugins-for-kubernetes
 $ kubectl apply -k 'https://github.com/intel/intel-device-plugins-for-kubernetes/deployments/sgx_plugin/overlays/epc-nfd/'
 ```
 
-The second approach has a lesser deployment footprint. It does not require NFD, but a helper daemonset that creates `sgx.intel.com/capable='true'` node label and advertises EPC capacity to the API server.
+The second approach has a lesser deployment footprint. It does not require NFD, but a helper daemonset that creates `sgx.intel.com/capable='true'` node label and advertises EPC capacity directly to the API server.
 
 The following kustomization is used for this approach:
 ```bash

demo/dlb-libdlb-demo-pf-pod.yaml

@@ -6,7 +6,7 @@ spec:
   restartPolicy: Never
   containers:
   - name: dlb-libdlb-demo-pf-pod
-    image: intel/dlb-libdlb-demo:devel
+    image: intel/dlb-libdlb-demo:0.27.0
     imagePullPolicy: IfNotPresent
     resources:
       limits:

demo/dlb-libdlb-demo-pod.yaml

@@ -6,7 +6,7 @@ spec:
   restartPolicy: Never
   containers:
   - name: pf
-    image: intel/dlb-libdlb-demo:devel
+    image: intel/dlb-libdlb-demo:0.27.0
     imagePullPolicy: IfNotPresent
     resources:
       limits:
@@ -18,7 +18,7 @@ spec:
         cpu: 1
         memory: 200Mi
   - name: vf
-    image: intel/dlb-libdlb-demo:devel
+    image: intel/dlb-libdlb-demo:0.27.0
     imagePullPolicy: IfNotPresent
     resources:
       limits:

demo/dlb-libdlb-demo-vf-pod.yaml

@@ -6,7 +6,7 @@ spec:
   restartPolicy: Never
   containers:
   - name: dlb-libdlb-demo-vf-pod
-    image: intel/dlb-libdlb-demo:devel
+    image: intel/dlb-libdlb-demo:0.27.0
     command: [ "sh", "-c", "/usr/local/bin/dir_traffic -n 8 -w epoll -d $(ls /dev/dlb* | sed 's/\\/dev\\/dlb//')" ]
     imagePullPolicy: IfNotPresent
     resources:

demo/dsa-accel-config-demo-pod.yaml

@@ -7,7 +7,7 @@ metadata:
 spec:
   containers:
   - name: dsa-accel-config-demo
-    image: intel/accel-config-demo:devel
+    image: intel/accel-config-demo:0.27.0
     imagePullPolicy: IfNotPresent
     resources:
       limits:

demo/iaa-accel-config-demo-pod.yaml

@@ -7,7 +7,7 @@ metadata:
 spec:
   containers:
   - name: iaa-accel-config-demo
-    image: intel/accel-config-demo:devel
+    image: intel/accel-config-demo:0.27.0
     command: [ "/bin/bash", "-c", "cd /test && /bin/bash -e ./iaa_user_test_runner.sh" ]
     imagePullPolicy: IfNotPresent
     resources:

demo/intelfpga-job.yaml

@@ -13,7 +13,7 @@ spec:
       restartPolicy: Never
       containers:
         - name: intelfpga-demo-job-1
-          image: intel/opae-nlb-demo:devel
+          image: intel/opae-nlb-demo:0.27.0
           imagePullPolicy: IfNotPresent
           securityContext:
             capabilities:

demo/openssl-qat-engine/Dockerfile

@@ -1,10 +1,10 @@
 FROM ubuntu:22.04 as builder
 
 ARG QATLIB_VERSION="23.02.0"
-ARG QAT_ENGINE_VERSION="v0.6.19"
+ARG QAT_ENGINE_VERSION="v1.1.0"
 ARG ASYNC_NGINX_VERSION="v0.5.0"
 ARG IPSEC_MB_VERSION="v1.3"
-ARG IPP_CRYPTO_VERSION="ippcp_2021.7"
+ARG IPP_CRYPTO_VERSION="ippcp_2021.7.1"
 
 RUN apt update && \
     env DEBIAN_FRONTEND=noninteractive apt install -y \
@@ -74,7 +74,7 @@ COPY --from=builder /usr/bin/*_sample* /usr/bin/
 COPY --from=builder /usr/lib/libqat.so.3.0.3 /usr/lib/
 COPY --from=builder /usr/lib/libusdm.so.0.1.0 /usr/lib/
 COPY --from=builder /usr/lib64/libIPSec_MB.so.1 /usr/lib/x86_64-linux-gnu/
-COPY --from=builder /usr/local/lib/libcrypto_mb.so.11.5 /usr/lib/x86_64-linux-gnu/
+COPY --from=builder /usr/local/lib/libcrypto_mb.so.11.6 /usr/lib/x86_64-linux-gnu/
 COPY --from=builder /usr/lib/x86_64-linux-gnu/engines-3/qatengine.so /usr/lib/x86_64-linux-gnu/engines-3/qatengine.so
 COPY --from=builder /var/www/ /var/www/
 COPY --from=builder /usr/lib64/nginx/* /usr/lib64/nginx/

demo/test-fpga-orchestrated.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: test-container
-    image: intel/opae-nlb-demo:devel
+    image: intel/opae-nlb-demo:0.27.0
     imagePullPolicy: IfNotPresent
     securityContext:
       capabilities:

demo/test-fpga-preprogrammed.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: test-container
-    image: intel/opae-nlb-demo:devel
+    image: intel/opae-nlb-demo:0.27.0
     imagePullPolicy: IfNotPresent
     securityContext:
       capabilities:

deployments/dlb_plugin/base/intel-dlb-plugin.yaml

@@ -21,7 +21,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-dlb-plugin:devel
+        image: intel/intel-dlb-plugin:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true

deployments/dlb_plugin/overlays/dlb_initcontainer/dlb_initcontainer.yaml

@@ -7,7 +7,7 @@ spec:
     spec:
       initContainers:
       - name: intel-dlb-initcontainer
-        image: intel/intel-dlb-initcontainer:devel
+        image: intel/intel-dlb-initcontainer:0.27.0
         securityContext:
           readOnlyRootFilesystem: true
           privileged: true

deployments/dsa_plugin/base/intel-dsa-plugin.yaml

@@ -21,7 +21,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-dsa-plugin:devel
+        image: intel/intel-dsa-plugin:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true

deployments/dsa_plugin/overlays/dsa_initcontainer/dsa_initcontainer.yaml

@@ -12,7 +12,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-idxd-config-initcontainer:devel
+        image: intel/intel-idxd-config-initcontainer:0.27.0
         securityContext:
           readOnlyRootFilesystem: true
           privileged: true

deployments/fpga_admissionwebhook/manager/manager.yaml

@@ -16,7 +16,7 @@ spec:
         control-plane: controller-manager
     spec:
       containers:
-      - image: intel/intel-fpga-admissionwebhook:devel
+      - image: intel/intel-fpga-admissionwebhook:0.27.0
         imagePullPolicy: IfNotPresent
         name: manager
         securityContext:

deployments/fpga_plugin/base/intel-fpga-plugin-daemonset.yaml

@@ -16,7 +16,7 @@ spec:
     spec:
       initContainers:
       - name: intel-fpga-initcontainer
-        image: intel/intel-fpga-initcontainer:devel
+        image: intel/intel-fpga-initcontainer:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
@@ -33,7 +33,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-fpga-plugin:devel
+        image: intel/intel-fpga-plugin:0.27.0
         imagePullPolicy: IfNotPresent
         args:
           - -mode=af

deployments/gpu_plugin/base/intel-gpu-plugin.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       initContainers:
       - name: intel-gpu-initcontainer
-        image: intel/intel-gpu-initcontainer:devel
+        image: intel/intel-gpu-initcontainer:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           seLinuxOptions:
@@ -36,7 +36,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: status.hostIP
-        image: intel/intel-gpu-plugin:devel
+        image: intel/intel-gpu-plugin:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           seLinuxOptions:

deployments/iaa_plugin/base/intel-iaa-plugin.yaml

@@ -21,7 +21,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-iaa-plugin:devel
+        image: intel/intel-iaa-plugin:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true

deployments/iaa_plugin/overlays/iaa_initcontainer/iaa_initcontainer.yaml

@@ -14,7 +14,7 @@ spec:
                 fieldPath: spec.nodeName
           - name: DEVICE_TYPE
             value: "iaa"
-        image: intel/intel-idxd-config-initcontainer:devel
+        image: intel/intel-idxd-config-initcontainer:0.27.0
         securityContext:
           readOnlyRootFilesystem: true
           privileged: true

deployments/operator/manager/manager.yaml

@@ -23,7 +23,7 @@ spec:
         control-plane: controller-manager
     spec:
       containers:
-      - image: docker.io/intel/intel-deviceplugin-operator:devel
+      - image: docker.io/intel/intel-deviceplugin-operator:0.27.0
         imagePullPolicy: IfNotPresent
         name: manager
         livenessProbe:

deployments/operator/manifests/bases/intel-device-plugins-operator.clusterserviceversion.yaml

@@ -5,7 +5,7 @@ metadata:
     alm-examples: '[]'
     capabilities: Seamless Upgrades
     categories: Drivers and plugins
-    containerImage: docker.io/intel/intel-deviceplugin-operator:0.25.0
+    containerImage: docker.io/intel/intel-deviceplugin-operator:0.27.0
     createdAt: "2022-11-09"
     description: This operator is a Kubernetes custom controller whose goal is to
       serve the installation and lifecycle management of Intel device plugins for

deployments/operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml

@@ -9,8 +9,8 @@ metadata:
   # annotations:
   #   container.apparmor.security.beta.kubernetes.io/intel-dlb-plugin: unconfined
 spec:
-  image: intel/intel-dlb-plugin:0.26.0
+  image: intel/intel-dlb-plugin:0.27.0
-  initImage: intel/intel-dlb-initcontainer:0.26.0
+  initImage: intel/intel-dlb-initcontainer:0.27.0
   logLevel: 4
   nodeSelector:
     intel.feature.node.kubernetes.io/dlb: 'true'

deployments/operator/samples/deviceplugin_v1_dsadeviceplugin.yaml

@@ -3,8 +3,8 @@ kind: DsaDevicePlugin
 metadata:
   name: dsadeviceplugin-sample
 spec:
-  image: intel/intel-dsa-plugin:0.26.0
+  image: intel/intel-dsa-plugin:0.27.0
-  initImage: intel/intel-idxd-config-initcontainer:0.26.0
+  initImage: intel/intel-idxd-config-initcontainer:0.27.0
   sharedDevNum: 10
   logLevel: 4
   nodeSelector:

deployments/operator/samples/deviceplugin_v1_fpgadeviceplugin.yaml

@@ -3,8 +3,8 @@ kind: FpgaDevicePlugin
 metadata:
   name: fpgadeviceplugin-sample
 spec:
-  image: intel/intel-fpga-plugin:0.26.0
+  image: intel/intel-fpga-plugin:0.27.0
-  initImage: intel/intel-fpga-initcontainer:0.26.0
+  initImage: intel/intel-fpga-initcontainer:0.27.0
   mode: region
   logLevel: 4
   nodeSelector:

deployments/operator/samples/deviceplugin_v1_gpudeviceplugin.yaml

@@ -3,8 +3,8 @@ kind: GpuDevicePlugin
 metadata:
   name: gpudeviceplugin-sample
 spec:
-  image: intel/intel-gpu-plugin:0.26.0
+  image: intel/intel-gpu-plugin:0.27.0
-  initImage: intel/intel-gpu-initcontainer:0.26.0
+  initImage: intel/intel-gpu-initcontainer:0.27.0
   sharedDevNum: 10
   logLevel: 4
   nodeSelector:

deployments/operator/samples/deviceplugin_v1_iaadeviceplugin.yaml

@@ -3,8 +3,8 @@ kind: IaaDevicePlugin
 metadata:
   name: iaadeviceplugin-sample
 spec:
-  image: intel/intel-iaa-plugin:0.26.0
+  image: intel/intel-iaa-plugin:0.27.0
-  initImage: intel/intel-idxd-config-initcontainer:0.26.0
+  initImage: intel/intel-idxd-config-initcontainer:0.27.0
   sharedDevNum: 10
   logLevel: 4
   nodeSelector:

deployments/operator/samples/deviceplugin_v1_qatdeviceplugin.yaml

@@ -9,8 +9,8 @@ metadata:
   # annotations:
   #   container.apparmor.security.beta.kubernetes.io/intel-qat-plugin: unconfined
 spec:
-  image: intel/intel-qat-plugin:0.26.0
+  image: intel/intel-qat-plugin:0.27.0
-  initImage: intel/intel-qat-initcontainer:0.26.0
+  initImage: intel/intel-qat-initcontainer:0.27.0
   dpdkDriver: vfio-pci
   kernelVfDrivers:
     - c6xxvf

deployments/operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml

@@ -3,7 +3,7 @@ kind: SgxDevicePlugin
 metadata:
   name: sgxdeviceplugin-sample
 spec:
-  image: intel/intel-sgx-plugin:0.26.0
+  image: intel/intel-sgx-plugin:0.27.0
   enclaveLimit: 110
   provisionLimit: 110
   logLevel: 4

deployments/qat_dpdk_app/base/crypto-perf-dpdk-pod-requesting-qat.yaml

@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: crypto-perf
-    image: intel/crypto-perf:devel
+    image: intel/crypto-perf:0.27.0
     imagePullPolicy: IfNotPresent
     command: [ "/bin/bash", "-c", "--" ]
     args: [ "while true; do sleep 300000; done;" ]

deployments/qat_plugin/base/intel-qat-kernel-plugin.yaml

@@ -19,7 +19,7 @@ spec:
           readOnlyRootFilesystem: true
           allowPrivilegeEscalation: false
           privileged: true
-        image: intel/intel-qat-plugin:devel
+        image: intel/intel-qat-plugin:0.27.0
         imagePullPolicy: IfNotPresent
         args: ["-mode", "kernel"]
         volumeMounts:

deployments/qat_plugin/base/intel-qat-plugin.yaml

@@ -21,7 +21,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-qat-plugin:devel
+        image: intel/intel-qat-plugin:0.27.0
         securityContext:
           seLinuxOptions:
             type: "container_device_plugin_t"

deployments/qat_plugin/overlays/qat_initcontainer/qat_initcontainer.yaml

@@ -12,7 +12,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-qat-initcontainer:devel
+        image: intel/intel-qat-initcontainer:0.27.0
         securityContext:
           readOnlyRootFilesystem: true
           privileged: true

deployments/sgx_admissionwebhook/manager/manager.yaml

@@ -16,7 +16,7 @@ spec:
         control-plane: controller-manager
     spec:
       containers:
-      - image: intel/intel-sgx-admissionwebhook:devel
+      - image: intel/intel-sgx-admissionwebhook:0.27.0
         imagePullPolicy: IfNotPresent
         name: manager
         securityContext:

deployments/sgx_plugin/base/intel-sgx-plugin.yaml

@@ -16,7 +16,7 @@ spec:
       automountServiceAccountToken: false
       containers:
       - name: intel-sgx-plugin
-        image: intel/intel-sgx-plugin:devel
+        image: intel/intel-sgx-plugin:0.27.0
         securityContext:
           seLinuxOptions:
             type: "container_device_plugin_t"

deployments/sgx_plugin/overlays/epc-hook-initcontainer/add-epc-nfd-initcontainer.yaml

@@ -7,7 +7,7 @@ spec:
     spec:
       initContainers:
       - name: intel-sgx-initcontainer
-        image: intel/intel-sgx-initcontainer:devel
+        image: intel/intel-sgx-initcontainer:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true

deployments/sgx_plugin/overlays/epc-register/init-daemonset.yaml

@@ -16,7 +16,7 @@ spec:
       serviceAccountName: sgx-plugin
       containers:
       - name: sgx-node-init
-        image: intel/intel-sgx-initcontainer:devel
+        image: intel/intel-sgx-initcontainer:0.27.0
         imagePullPolicy: IfNotPresent
         command:
           - /usr/local/bin/sgx-sw/intel-sgx-epchook

deployments/vpu_plugin/base/intel-vpu-plugin.yaml

@@ -21,7 +21,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-vpu-plugin:devel
+        image: intel/intel-vpu-plugin:0.27.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true

deployments/xpumanager_sidecar/kustom/kustom_xpumanager.yaml

@@ -13,7 +13,7 @@ spec:
             path: "/etc/kubernetes/node-feature-discovery/features.d/"
       containers:
       - name: xelink-sidecar
-        image: intel/intel-xpumanager-sidecar:devel
+        image: intel/intel-xpumanager-sidecar:0.27.0
         imagePullPolicy: Always
         args:
           - -v=2

pkg/controllers/fpga/controller_test.go

@@ -181,7 +181,7 @@ func TestNewDaemonSetFPGA(t *testing.T) {
 
 	plugin := &devicepluginv1.FpgaDevicePlugin{
 		Spec: devicepluginv1.FpgaDevicePluginSpec{
-			InitImage: "intel/intel-fpga-initcontainer:devel",
+			InitImage: "intel/intel-fpga-initcontainer:0.27.0",
 		},
 	}
 

pkg/controllers/gpu/controller_test.go

@@ -199,7 +199,7 @@ func TestNewDamonSetGPU(t *testing.T) {
 		}
 
 		if tc.isInitImage {
-			plugin.Spec.InitImage = "intel/intel-gpu-initcontainer:devel"
+			plugin.Spec.InitImage = "intel/intel-gpu-initcontainer:0.27.0"
 		}
 
 		t.Run(tc.name, func(t *testing.T) {

pkg/controllers/reconciler.go

@@ -37,7 +37,7 @@ import (
 
 var (
 	bKeeper         = &bookKeeper{}
-	ImageMinVersion = versionutil.MustParseSemantic("0.26.0")
+	ImageMinVersion = versionutil.MustParseSemantic("0.27.0")
 )
 
 func init() {

test/e2e/fpga/fpga.go

@@ -102,7 +102,7 @@ func runTestCase(ctx context.Context, fmw *framework.Framework, pluginKustomizat
 	}
 
 	resource = v1.ResourceName(podResource)
-	image := "intel/opae-nlb-demo:devel"
+	image := "intel/opae-nlb-demo:0.27.0"
 
 	ginkgo.By("submitting a pod requesting correct FPGA resources")
 

test/e2e/qat/qatplugin_dpdk.go

@@ -190,7 +190,7 @@ func runCpaSampleCode(ctx context.Context, f *framework.Framework, runTests int,
 			Containers: []v1.Container{
 				{
 					Name:            "openssl-qat-engine",
-					Image:           "intel/openssl-qat-engine:devel",
+					Image:           "intel/openssl-qat-engine:0.27.0",
 					ImagePullPolicy: "IfNotPresent",
 					Command:         []string{"cpa_sample_code", "runTests=" + strconv.Itoa(runTests), "signOfLife=1"},
 					SecurityContext: &v1.SecurityContext{