mirror of
https://github.com/intel/intel-device-plugins-for-kubernetes.git
synced 2025-06-03 03:59:37 +00:00
Merge pull request #1441 from tkatila/release-0.27-prep
Release 0.27 creation
This commit is contained in:
commit
f333145edf
24
.github/workflows/publish.yml
vendored
24
.github/workflows/publish.yml
vendored
@ -4,9 +4,9 @@ on:
|
|||||||
push:
|
push:
|
||||||
branches:
|
branches:
|
||||||
- main
|
- main
|
||||||
- release-0.24
|
|
||||||
- release-0.25
|
- release-0.25
|
||||||
- release-0.26
|
- release-0.26
|
||||||
|
- release-0.27
|
||||||
|
|
||||||
permissions:
|
permissions:
|
||||||
contents: read
|
contents: read
|
||||||
@ -44,17 +44,6 @@ jobs:
|
|||||||
rm -rf _work/venv
|
rm -rf _work/venv
|
||||||
make vhtml
|
make vhtml
|
||||||
mv _build/html/* $HOME/output/
|
mv _build/html/* $HOME/output/
|
||||||
- uses: actions/checkout@v3
|
|
||||||
with:
|
|
||||||
fetch-depth: 0
|
|
||||||
ref: release-0.24
|
|
||||||
- name: Build release-0.24
|
|
||||||
run: |
|
|
||||||
GITHUB_SHA=$(git rev-parse HEAD)
|
|
||||||
export GITHUB_SHA
|
|
||||||
rm -rf _work/venv
|
|
||||||
make vhtml
|
|
||||||
mv _build/html $HOME/output/0.24
|
|
||||||
- uses: actions/checkout@v3
|
- uses: actions/checkout@v3
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
@ -77,6 +66,17 @@ jobs:
|
|||||||
rm -rf _work/venv
|
rm -rf _work/venv
|
||||||
make vhtml
|
make vhtml
|
||||||
mv _build/html $HOME/output/0.26
|
mv _build/html $HOME/output/0.26
|
||||||
|
- uses: actions/checkout@v3
|
||||||
|
with:
|
||||||
|
fetch-depth: 0
|
||||||
|
ref: release-0.27
|
||||||
|
- name: Build release-0.27
|
||||||
|
run: |
|
||||||
|
GITHUB_SHA=$(git rev-parse HEAD)
|
||||||
|
export GITHUB_SHA
|
||||||
|
rm -rf _work/venv
|
||||||
|
make vhtml
|
||||||
|
mv _build/html $HOME/output/0.27
|
||||||
- name: Deploy the docs
|
- name: Deploy the docs
|
||||||
shell: bash
|
shell: bash
|
||||||
env:
|
env:
|
||||||
|
2
Jenkinsfile
vendored
2
Jenkinsfile
vendored
@ -142,7 +142,7 @@ pipeline {
|
|||||||
stage('make test-with-kind') {
|
stage('make test-with-kind') {
|
||||||
steps {
|
steps {
|
||||||
dir(path: "$REPO_DIR") {
|
dir(path: "$REPO_DIR") {
|
||||||
sh "make test-with-kind REG=intel/ TAG=devel"
|
sh "make test-with-kind REG=intel/ TAG=0.27.0"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
2
Makefile
2
Makefile
@ -136,7 +136,7 @@ clean:
|
|||||||
|
|
||||||
ORG?=intel
|
ORG?=intel
|
||||||
REG?=$(ORG)/
|
REG?=$(ORG)/
|
||||||
TAG?=devel
|
TAG?=0.27.0
|
||||||
export TAG
|
export TAG
|
||||||
|
|
||||||
e2e-fpga:
|
e2e-fpga:
|
||||||
|
11
README.md
11
README.md
@ -7,8 +7,8 @@ This repository contains a framework for developing plugins for the Kubernetes
|
|||||||
[device plugins framework](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/),
|
[device plugins framework](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/),
|
||||||
along with a number of device plugin implementations utilizing that framework.
|
along with a number of device plugin implementations utilizing that framework.
|
||||||
|
|
||||||
The [v0.26 release](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/latest)
|
The [v0.27 release](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/latest)
|
||||||
is the latest feature release with its documentation available [here](https://intel.github.io/intel-device-plugins-for-kubernetes/0.26/).
|
is the latest feature release with its documentation available [here](https://intel.github.io/intel-device-plugins-for-kubernetes/0.27/).
|
||||||
|
|
||||||
Table of Contents
|
Table of Contents
|
||||||
|
|
||||||
@ -166,10 +166,10 @@ as a standalone [SGX Admission webhook image](cmd/sgx_admissionwebhook/README.md
|
|||||||
#### Intel SGX EPC memory registration
|
#### Intel SGX EPC memory registration
|
||||||
|
|
||||||
The Intel SGX EPC memory available on each node is registered as a Kubernetes extended resource using
|
The Intel SGX EPC memory available on each node is registered as a Kubernetes extended resource using
|
||||||
node-feature-discovery (NFD). A custom NFD source hook is installed as part of
|
node-feature-discovery (NFD). An NFD Node Feature Rule is installed as part of
|
||||||
[SGX device plugin](cmd/sgx_plugin/README.md)
|
[SGX device plugin](cmd/sgx_plugin/README.md)
|
||||||
operator deployment and NFD is configured to register the Intel SGX EPC memory
|
operator deployment and NFD is configured to register the Intel SGX EPC memory
|
||||||
extended resource reported by the hook.
|
extended resource.
|
||||||
|
|
||||||
Containers requesting Intel SGX EPC resources in the cluster use
|
Containers requesting Intel SGX EPC resources in the cluster use
|
||||||
`sgx.intel.com/epc` resource which is of
|
`sgx.intel.com/epc` resource which is of
|
||||||
@ -262,9 +262,10 @@ matching Kubernetes versions are listed below:
|
|||||||
|
|
||||||
| Branch | Kubernetes branch/version | Status |
|
| Branch | Kubernetes branch/version | Status |
|
||||||
|:------------------|:-------------------------------|:------------|
|
|:------------------|:-------------------------------|:------------|
|
||||||
|
| release-0.27 | Kubernetes 1.27 branch v1.27.x | supported |
|
||||||
| release-0.26 | Kubernetes 1.26 branch v1.26.x | supported |
|
| release-0.26 | Kubernetes 1.26 branch v1.26.x | supported |
|
||||||
| release-0.25 | Kubernetes 1.25 branch v1.25.x | supported |
|
| release-0.25 | Kubernetes 1.25 branch v1.25.x | supported |
|
||||||
| release-0.24 | Kubernetes 1.24 branch v1.24.x | supported |
|
| release-0.24 | Kubernetes 1.24 branch v1.24.x | unsupported |
|
||||||
| release-0.23 | Kubernetes 1.23 branch v1.23.x | unsupported |
|
| release-0.23 | Kubernetes 1.23 branch v1.23.x | unsupported |
|
||||||
| release-0.22 | Kubernetes 1.22 branch v1.22.x | unsupported |
|
| release-0.22 | Kubernetes 1.22 branch v1.22.x | unsupported |
|
||||||
| release-0.21 | Kubernetes 1.21 branch v1.21.x | unsupported |
|
| release-0.21 | Kubernetes 1.21 branch v1.21.x | unsupported |
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_deviceplugin_operator"]
|
ENTRYPOINT ["/usr/local/bin/intel_deviceplugin_operator"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-deviceplugin-operator'
|
LABEL name='intel-deviceplugin-operator'
|
||||||
LABEL summary='Intel® device plugin operator for Kubernetes'
|
LABEL summary='Intel® device plugin operator for Kubernetes'
|
||||||
|
@ -55,7 +55,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
|
|||||||
###
|
###
|
||||||
FROM ${FINAL_BASE}
|
FROM ${FINAL_BASE}
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
COPY demo/dlb-init.sh /usr/local/bin/
|
COPY demo/dlb-init.sh /usr/local/bin/
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_dlb_device_plugin"]
|
ENTRYPOINT ["/usr/local/bin/intel_dlb_device_plugin"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-dlb-plugin'
|
LABEL name='intel-dlb-plugin'
|
||||||
LABEL summary='Intel® DLB device plugin for Kubernetes'
|
LABEL summary='Intel® DLB device plugin for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_dsa_device_plugin"]
|
ENTRYPOINT ["/usr/local/bin/intel_dsa_device_plugin"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-dsa-plugin'
|
LABEL name='intel-dsa-plugin'
|
||||||
LABEL summary='Intel® DSA device plugin for Kubernetes'
|
LABEL summary='Intel® DSA device plugin for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_fpga_admissionwebhook"]
|
ENTRYPOINT ["/usr/local/bin/intel_fpga_admissionwebhook"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-fpga-admissionwebhook'
|
LABEL name='intel-fpga-admissionwebhook'
|
||||||
LABEL summary='Intel® FPGA admission controller webhook for Kubernetes'
|
LABEL summary='Intel® FPGA admission controller webhook for Kubernetes'
|
||||||
|
@ -86,7 +86,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
|
|||||||
###
|
###
|
||||||
FROM ${FINAL_BASE}
|
FROM ${FINAL_BASE}
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-fpga-initcontainer'
|
LABEL name='intel-fpga-initcontainer'
|
||||||
LABEL summary='Intel® FPGA programming CRI hook for Kubernetes'
|
LABEL summary='Intel® FPGA programming CRI hook for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_fpga_device_plugin"]
|
ENTRYPOINT ["/usr/local/bin/intel_fpga_device_plugin"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-fpga-plugin'
|
LABEL name='intel-fpga-plugin'
|
||||||
LABEL summary='Intel® FPGA device plugin for Kubernetes'
|
LABEL summary='Intel® FPGA device plugin for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_gpu_fakedev"]
|
ENTRYPOINT ["/usr/local/bin/intel_gpu_fakedev"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-gpu-fakedev'
|
LABEL name='intel-gpu-fakedev'
|
||||||
LABEL summary='Fake device file generator for Intel® GPU plugin'
|
LABEL summary='Fake device file generator for Intel® GPU plugin'
|
||||||
|
@ -69,7 +69,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
|
|||||||
###
|
###
|
||||||
FROM ${FINAL_BASE}
|
FROM ${FINAL_BASE}
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-gpu-initcontainer'
|
LABEL name='intel-gpu-initcontainer'
|
||||||
LABEL summary='Intel® GPU NFD hook for Kubernetes'
|
LABEL summary='Intel® GPU NFD hook for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_gpu_device_plugin"]
|
ENTRYPOINT ["/usr/local/bin/intel_gpu_device_plugin"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-gpu-plugin'
|
LABEL name='intel-gpu-plugin'
|
||||||
LABEL summary='Intel® GPU device plugin for Kubernetes'
|
LABEL summary='Intel® GPU device plugin for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_iaa_device_plugin"]
|
ENTRYPOINT ["/usr/local/bin/intel_iaa_device_plugin"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-iaa-plugin'
|
LABEL name='intel-iaa-plugin'
|
||||||
LABEL summary='Intel® IAA device plugin for Kubernetes'
|
LABEL summary='Intel® IAA device plugin for Kubernetes'
|
||||||
|
@ -55,7 +55,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
|
|||||||
###
|
###
|
||||||
FROM ${FINAL_BASE}
|
FROM ${FINAL_BASE}
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-qat-initcontainer'
|
LABEL name='intel-qat-initcontainer'
|
||||||
LABEL summary='Intel® QAT initcontainer for Kubernetes'
|
LABEL summary='Intel® QAT initcontainer for Kubernetes'
|
||||||
|
@ -57,7 +57,7 @@ RUN install -D ${DIR}/LICENSE /install_root/licenses/intel-device-plugins-for-ku
|
|||||||
else mkdir -p /install_root/licenses/$CMD/go-licenses/ && cd licenses/$CMD && cp -r * /install_root/licenses/$CMD/go-licenses/ ; fi
|
else mkdir -p /install_root/licenses/$CMD/go-licenses/ && cd licenses/$CMD && cp -r * /install_root/licenses/$CMD/go-licenses/ ; fi
|
||||||
FROM debian:unstable-slim
|
FROM debian:unstable-slim
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-qat-plugin-kerneldrv'
|
LABEL name='intel-qat-plugin-kerneldrv'
|
||||||
LABEL summary='Intel® QAT device plugin kerneldrv for Kubernetes'
|
LABEL summary='Intel® QAT device plugin kerneldrv for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_qat_device_plugin"]
|
ENTRYPOINT ["/usr/local/bin/intel_qat_device_plugin"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-qat-plugin'
|
LABEL name='intel-qat-plugin'
|
||||||
LABEL summary='Intel® QAT device plugin for Kubernetes'
|
LABEL summary='Intel® QAT device plugin for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_sgx_admissionwebhook"]
|
ENTRYPOINT ["/usr/local/bin/intel_sgx_admissionwebhook"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-sgx-admissionwebhook'
|
LABEL name='intel-sgx-admissionwebhook'
|
||||||
LABEL summary='Intel® SGX admission controller webhook for Kubernetes'
|
LABEL summary='Intel® SGX admission controller webhook for Kubernetes'
|
||||||
|
@ -69,7 +69,7 @@ RUN curl -SL https://github.com/landley/toybox/archive/refs/tags/$TOYBOX_VERSION
|
|||||||
###
|
###
|
||||||
FROM ${FINAL_BASE}
|
FROM ${FINAL_BASE}
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-sgx-initcontainer'
|
LABEL name='intel-sgx-initcontainer'
|
||||||
LABEL summary='Intel® SGX NFD hook for Kubernetes'
|
LABEL summary='Intel® SGX NFD hook for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_sgx_device_plugin"]
|
ENTRYPOINT ["/usr/local/bin/intel_sgx_device_plugin"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-sgx-plugin'
|
LABEL name='intel-sgx-plugin'
|
||||||
LABEL summary='Intel® SGX device plugin for Kubernetes'
|
LABEL summary='Intel® SGX device plugin for Kubernetes'
|
||||||
|
@ -55,7 +55,7 @@ RUN install -D ${DIR}/LICENSE /install_root/licenses/intel-device-plugins-for-ku
|
|||||||
else mkdir -p /install_root/licenses/$CMD/go-licenses/ && cd licenses/$CMD && cp -r * /install_root/licenses/$CMD/go-licenses/ ; fi
|
else mkdir -p /install_root/licenses/$CMD/go-licenses/ && cd licenses/$CMD && cp -r * /install_root/licenses/$CMD/go-licenses/ ; fi
|
||||||
FROM debian:unstable-slim
|
FROM debian:unstable-slim
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-vpu-plugin'
|
LABEL name='intel-vpu-plugin'
|
||||||
LABEL summary='Intel® VPU device plugin for Kubernetes'
|
LABEL summary='Intel® VPU device plugin for Kubernetes'
|
||||||
|
@ -56,7 +56,7 @@ FROM ${FINAL_BASE}
|
|||||||
COPY --from=builder /install_root /
|
COPY --from=builder /install_root /
|
||||||
ENTRYPOINT ["/usr/local/bin/intel_xpumanager_sidecar"]
|
ENTRYPOINT ["/usr/local/bin/intel_xpumanager_sidecar"]
|
||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
LABEL name='intel-xpumanager-sidecar'
|
LABEL name='intel-xpumanager-sidecar'
|
||||||
LABEL summary='Intel® xpumanager sidecar'
|
LABEL summary='Intel® xpumanager sidecar'
|
||||||
|
@ -1,3 +1,3 @@
|
|||||||
LABEL vendor='Intel®'
|
LABEL vendor='Intel®'
|
||||||
LABEL version='devel'
|
LABEL version='0.27.0'
|
||||||
LABEL release='1'
|
LABEL release='1'
|
||||||
|
@ -19,7 +19,7 @@ Table of Contents
|
|||||||
The Intel SGX device plugin and related components allow workloads to use Intel SGX on
|
The Intel SGX device plugin and related components allow workloads to use Intel SGX on
|
||||||
platforms with SGX Flexible Launch Control enabled, e.g.,:
|
platforms with SGX Flexible Launch Control enabled, e.g.,:
|
||||||
|
|
||||||
- 3rd Generation Intel® Xeon® Scalable Platform, code-named “Ice Lake”
|
- 3rd/4th Generation Intel® Xeon® Scalable Platforms
|
||||||
- Intel® Xeon® E3
|
- Intel® Xeon® E3
|
||||||
- Intel® NUC Kit NUC7CJYH
|
- Intel® NUC Kit NUC7CJYH
|
||||||
|
|
||||||
@ -122,7 +122,7 @@ $ kubectl apply -k 'https://github.com/intel/intel-device-plugins-for-kubernetes
|
|||||||
$ kubectl apply -k 'https://github.com/intel/intel-device-plugins-for-kubernetes/deployments/sgx_plugin/overlays/epc-nfd/'
|
$ kubectl apply -k 'https://github.com/intel/intel-device-plugins-for-kubernetes/deployments/sgx_plugin/overlays/epc-nfd/'
|
||||||
```
|
```
|
||||||
|
|
||||||
The second approach has a lesser deployment footprint. It does not require NFD, but a helper daemonset that creates `sgx.intel.com/capable='true'` node label and advertises EPC capacity to the API server.
|
The second approach has a lesser deployment footprint. It does not require NFD, but a helper daemonset that creates `sgx.intel.com/capable='true'` node label and advertises EPC capacity directly to the API server.
|
||||||
|
|
||||||
The following kustomization is used for this approach:
|
The following kustomization is used for this approach:
|
||||||
```bash
|
```bash
|
||||||
|
@ -6,7 +6,7 @@ spec:
|
|||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
containers:
|
containers:
|
||||||
- name: dlb-libdlb-demo-pf-pod
|
- name: dlb-libdlb-demo-pf-pod
|
||||||
image: intel/dlb-libdlb-demo:devel
|
image: intel/dlb-libdlb-demo:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
|
@ -6,7 +6,7 @@ spec:
|
|||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
containers:
|
containers:
|
||||||
- name: pf
|
- name: pf
|
||||||
image: intel/dlb-libdlb-demo:devel
|
image: intel/dlb-libdlb-demo:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
@ -18,7 +18,7 @@ spec:
|
|||||||
cpu: 1
|
cpu: 1
|
||||||
memory: 200Mi
|
memory: 200Mi
|
||||||
- name: vf
|
- name: vf
|
||||||
image: intel/dlb-libdlb-demo:devel
|
image: intel/dlb-libdlb-demo:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
|
@ -6,7 +6,7 @@ spec:
|
|||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
containers:
|
containers:
|
||||||
- name: dlb-libdlb-demo-vf-pod
|
- name: dlb-libdlb-demo-vf-pod
|
||||||
image: intel/dlb-libdlb-demo:devel
|
image: intel/dlb-libdlb-demo:0.27.0
|
||||||
command: [ "sh", "-c", "/usr/local/bin/dir_traffic -n 8 -w epoll -d $(ls /dev/dlb* | sed 's/\\/dev\\/dlb//')" ]
|
command: [ "sh", "-c", "/usr/local/bin/dir_traffic -n 8 -w epoll -d $(ls /dev/dlb* | sed 's/\\/dev\\/dlb//')" ]
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
resources:
|
resources:
|
||||||
|
@ -7,7 +7,7 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: dsa-accel-config-demo
|
- name: dsa-accel-config-demo
|
||||||
image: intel/accel-config-demo:devel
|
image: intel/accel-config-demo:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
resources:
|
resources:
|
||||||
limits:
|
limits:
|
||||||
|
@ -7,7 +7,7 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: iaa-accel-config-demo
|
- name: iaa-accel-config-demo
|
||||||
image: intel/accel-config-demo:devel
|
image: intel/accel-config-demo:0.27.0
|
||||||
command: [ "/bin/bash", "-c", "cd /test && /bin/bash -e ./iaa_user_test_runner.sh" ]
|
command: [ "/bin/bash", "-c", "cd /test && /bin/bash -e ./iaa_user_test_runner.sh" ]
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
resources:
|
resources:
|
||||||
|
@ -13,7 +13,7 @@ spec:
|
|||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
containers:
|
containers:
|
||||||
- name: intelfpga-demo-job-1
|
- name: intelfpga-demo-job-1
|
||||||
image: intel/opae-nlb-demo:devel
|
image: intel/opae-nlb-demo:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -1,10 +1,10 @@
|
|||||||
FROM ubuntu:22.04 as builder
|
FROM ubuntu:22.04 as builder
|
||||||
|
|
||||||
ARG QATLIB_VERSION="23.02.0"
|
ARG QATLIB_VERSION="23.02.0"
|
||||||
ARG QAT_ENGINE_VERSION="v0.6.19"
|
ARG QAT_ENGINE_VERSION="v1.1.0"
|
||||||
ARG ASYNC_NGINX_VERSION="v0.5.0"
|
ARG ASYNC_NGINX_VERSION="v0.5.0"
|
||||||
ARG IPSEC_MB_VERSION="v1.3"
|
ARG IPSEC_MB_VERSION="v1.3"
|
||||||
ARG IPP_CRYPTO_VERSION="ippcp_2021.7"
|
ARG IPP_CRYPTO_VERSION="ippcp_2021.7.1"
|
||||||
|
|
||||||
RUN apt update && \
|
RUN apt update && \
|
||||||
env DEBIAN_FRONTEND=noninteractive apt install -y \
|
env DEBIAN_FRONTEND=noninteractive apt install -y \
|
||||||
@ -74,7 +74,7 @@ COPY --from=builder /usr/bin/*_sample* /usr/bin/
|
|||||||
COPY --from=builder /usr/lib/libqat.so.3.0.3 /usr/lib/
|
COPY --from=builder /usr/lib/libqat.so.3.0.3 /usr/lib/
|
||||||
COPY --from=builder /usr/lib/libusdm.so.0.1.0 /usr/lib/
|
COPY --from=builder /usr/lib/libusdm.so.0.1.0 /usr/lib/
|
||||||
COPY --from=builder /usr/lib64/libIPSec_MB.so.1 /usr/lib/x86_64-linux-gnu/
|
COPY --from=builder /usr/lib64/libIPSec_MB.so.1 /usr/lib/x86_64-linux-gnu/
|
||||||
COPY --from=builder /usr/local/lib/libcrypto_mb.so.11.5 /usr/lib/x86_64-linux-gnu/
|
COPY --from=builder /usr/local/lib/libcrypto_mb.so.11.6 /usr/lib/x86_64-linux-gnu/
|
||||||
COPY --from=builder /usr/lib/x86_64-linux-gnu/engines-3/qatengine.so /usr/lib/x86_64-linux-gnu/engines-3/qatengine.so
|
COPY --from=builder /usr/lib/x86_64-linux-gnu/engines-3/qatengine.so /usr/lib/x86_64-linux-gnu/engines-3/qatengine.so
|
||||||
COPY --from=builder /var/www/ /var/www/
|
COPY --from=builder /var/www/ /var/www/
|
||||||
COPY --from=builder /usr/lib64/nginx/* /usr/lib64/nginx/
|
COPY --from=builder /usr/lib64/nginx/* /usr/lib64/nginx/
|
||||||
|
@ -5,7 +5,7 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: test-container
|
- name: test-container
|
||||||
image: intel/opae-nlb-demo:devel
|
image: intel/opae-nlb-demo:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -5,7 +5,7 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: test-container
|
- name: test-container
|
||||||
image: intel/opae-nlb-demo:devel
|
image: intel/opae-nlb-demo:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -21,7 +21,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-dlb-plugin:devel
|
image: intel/intel-dlb-plugin:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
@ -7,7 +7,7 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
initContainers:
|
initContainers:
|
||||||
- name: intel-dlb-initcontainer
|
- name: intel-dlb-initcontainer
|
||||||
image: intel/intel-dlb-initcontainer:devel
|
image: intel/intel-dlb-initcontainer:0.27.0
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
privileged: true
|
privileged: true
|
||||||
|
@ -21,7 +21,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-dsa-plugin:devel
|
image: intel/intel-dsa-plugin:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
@ -12,7 +12,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-idxd-config-initcontainer:devel
|
image: intel/intel-idxd-config-initcontainer:0.27.0
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
privileged: true
|
privileged: true
|
||||||
|
@ -16,7 +16,7 @@ spec:
|
|||||||
control-plane: controller-manager
|
control-plane: controller-manager
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- image: intel/intel-fpga-admissionwebhook:devel
|
- image: intel/intel-fpga-admissionwebhook:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
name: manager
|
name: manager
|
||||||
securityContext:
|
securityContext:
|
||||||
|
@ -16,7 +16,7 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
initContainers:
|
initContainers:
|
||||||
- name: intel-fpga-initcontainer
|
- name: intel-fpga-initcontainer
|
||||||
image: intel/intel-fpga-initcontainer:devel
|
image: intel/intel-fpga-initcontainer:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
@ -33,7 +33,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-fpga-plugin:devel
|
image: intel/intel-fpga-plugin:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
args:
|
args:
|
||||||
- -mode=af
|
- -mode=af
|
||||||
|
@ -15,7 +15,7 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
initContainers:
|
initContainers:
|
||||||
- name: intel-gpu-initcontainer
|
- name: intel-gpu-initcontainer
|
||||||
image: intel/intel-gpu-initcontainer:devel
|
image: intel/intel-gpu-initcontainer:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
seLinuxOptions:
|
seLinuxOptions:
|
||||||
@ -36,7 +36,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: status.hostIP
|
fieldPath: status.hostIP
|
||||||
image: intel/intel-gpu-plugin:devel
|
image: intel/intel-gpu-plugin:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
seLinuxOptions:
|
seLinuxOptions:
|
||||||
|
@ -21,7 +21,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-iaa-plugin:devel
|
image: intel/intel-iaa-plugin:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
@ -14,7 +14,7 @@ spec:
|
|||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
- name: DEVICE_TYPE
|
- name: DEVICE_TYPE
|
||||||
value: "iaa"
|
value: "iaa"
|
||||||
image: intel/intel-idxd-config-initcontainer:devel
|
image: intel/intel-idxd-config-initcontainer:0.27.0
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
privileged: true
|
privileged: true
|
||||||
|
@ -23,7 +23,7 @@ spec:
|
|||||||
control-plane: controller-manager
|
control-plane: controller-manager
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- image: docker.io/intel/intel-deviceplugin-operator:devel
|
- image: docker.io/intel/intel-deviceplugin-operator:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
name: manager
|
name: manager
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
|
@ -5,7 +5,7 @@ metadata:
|
|||||||
alm-examples: '[]'
|
alm-examples: '[]'
|
||||||
capabilities: Seamless Upgrades
|
capabilities: Seamless Upgrades
|
||||||
categories: Drivers and plugins
|
categories: Drivers and plugins
|
||||||
containerImage: docker.io/intel/intel-deviceplugin-operator:0.25.0
|
containerImage: docker.io/intel/intel-deviceplugin-operator:0.27.0
|
||||||
createdAt: "2022-11-09"
|
createdAt: "2022-11-09"
|
||||||
description: This operator is a Kubernetes custom controller whose goal is to
|
description: This operator is a Kubernetes custom controller whose goal is to
|
||||||
serve the installation and lifecycle management of Intel device plugins for
|
serve the installation and lifecycle management of Intel device plugins for
|
||||||
|
@ -9,8 +9,8 @@ metadata:
|
|||||||
# annotations:
|
# annotations:
|
||||||
# container.apparmor.security.beta.kubernetes.io/intel-dlb-plugin: unconfined
|
# container.apparmor.security.beta.kubernetes.io/intel-dlb-plugin: unconfined
|
||||||
spec:
|
spec:
|
||||||
image: intel/intel-dlb-plugin:0.26.0
|
image: intel/intel-dlb-plugin:0.27.0
|
||||||
initImage: intel/intel-dlb-initcontainer:0.26.0
|
initImage: intel/intel-dlb-initcontainer:0.27.0
|
||||||
logLevel: 4
|
logLevel: 4
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
intel.feature.node.kubernetes.io/dlb: 'true'
|
intel.feature.node.kubernetes.io/dlb: 'true'
|
||||||
|
@ -3,8 +3,8 @@ kind: DsaDevicePlugin
|
|||||||
metadata:
|
metadata:
|
||||||
name: dsadeviceplugin-sample
|
name: dsadeviceplugin-sample
|
||||||
spec:
|
spec:
|
||||||
image: intel/intel-dsa-plugin:0.26.0
|
image: intel/intel-dsa-plugin:0.27.0
|
||||||
initImage: intel/intel-idxd-config-initcontainer:0.26.0
|
initImage: intel/intel-idxd-config-initcontainer:0.27.0
|
||||||
sharedDevNum: 10
|
sharedDevNum: 10
|
||||||
logLevel: 4
|
logLevel: 4
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
|
@ -3,8 +3,8 @@ kind: FpgaDevicePlugin
|
|||||||
metadata:
|
metadata:
|
||||||
name: fpgadeviceplugin-sample
|
name: fpgadeviceplugin-sample
|
||||||
spec:
|
spec:
|
||||||
image: intel/intel-fpga-plugin:0.26.0
|
image: intel/intel-fpga-plugin:0.27.0
|
||||||
initImage: intel/intel-fpga-initcontainer:0.26.0
|
initImage: intel/intel-fpga-initcontainer:0.27.0
|
||||||
mode: region
|
mode: region
|
||||||
logLevel: 4
|
logLevel: 4
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
|
@ -3,8 +3,8 @@ kind: GpuDevicePlugin
|
|||||||
metadata:
|
metadata:
|
||||||
name: gpudeviceplugin-sample
|
name: gpudeviceplugin-sample
|
||||||
spec:
|
spec:
|
||||||
image: intel/intel-gpu-plugin:0.26.0
|
image: intel/intel-gpu-plugin:0.27.0
|
||||||
initImage: intel/intel-gpu-initcontainer:0.26.0
|
initImage: intel/intel-gpu-initcontainer:0.27.0
|
||||||
sharedDevNum: 10
|
sharedDevNum: 10
|
||||||
logLevel: 4
|
logLevel: 4
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
|
@ -3,8 +3,8 @@ kind: IaaDevicePlugin
|
|||||||
metadata:
|
metadata:
|
||||||
name: iaadeviceplugin-sample
|
name: iaadeviceplugin-sample
|
||||||
spec:
|
spec:
|
||||||
image: intel/intel-iaa-plugin:0.26.0
|
image: intel/intel-iaa-plugin:0.27.0
|
||||||
initImage: intel/intel-idxd-config-initcontainer:0.26.0
|
initImage: intel/intel-idxd-config-initcontainer:0.27.0
|
||||||
sharedDevNum: 10
|
sharedDevNum: 10
|
||||||
logLevel: 4
|
logLevel: 4
|
||||||
nodeSelector:
|
nodeSelector:
|
||||||
|
@ -9,8 +9,8 @@ metadata:
|
|||||||
# annotations:
|
# annotations:
|
||||||
# container.apparmor.security.beta.kubernetes.io/intel-qat-plugin: unconfined
|
# container.apparmor.security.beta.kubernetes.io/intel-qat-plugin: unconfined
|
||||||
spec:
|
spec:
|
||||||
image: intel/intel-qat-plugin:0.26.0
|
image: intel/intel-qat-plugin:0.27.0
|
||||||
initImage: intel/intel-qat-initcontainer:0.26.0
|
initImage: intel/intel-qat-initcontainer:0.27.0
|
||||||
dpdkDriver: vfio-pci
|
dpdkDriver: vfio-pci
|
||||||
kernelVfDrivers:
|
kernelVfDrivers:
|
||||||
- c6xxvf
|
- c6xxvf
|
||||||
|
@ -3,7 +3,7 @@ kind: SgxDevicePlugin
|
|||||||
metadata:
|
metadata:
|
||||||
name: sgxdeviceplugin-sample
|
name: sgxdeviceplugin-sample
|
||||||
spec:
|
spec:
|
||||||
image: intel/intel-sgx-plugin:0.26.0
|
image: intel/intel-sgx-plugin:0.27.0
|
||||||
enclaveLimit: 110
|
enclaveLimit: 110
|
||||||
provisionLimit: 110
|
provisionLimit: 110
|
||||||
logLevel: 4
|
logLevel: 4
|
||||||
|
@ -5,7 +5,7 @@ metadata:
|
|||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- name: crypto-perf
|
- name: crypto-perf
|
||||||
image: intel/crypto-perf:devel
|
image: intel/crypto-perf:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command: [ "/bin/bash", "-c", "--" ]
|
command: [ "/bin/bash", "-c", "--" ]
|
||||||
args: [ "while true; do sleep 300000; done;" ]
|
args: [ "while true; do sleep 300000; done;" ]
|
||||||
|
@ -19,7 +19,7 @@ spec:
|
|||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
privileged: true
|
privileged: true
|
||||||
image: intel/intel-qat-plugin:devel
|
image: intel/intel-qat-plugin:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
args: ["-mode", "kernel"]
|
args: ["-mode", "kernel"]
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
|
@ -21,7 +21,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-qat-plugin:devel
|
image: intel/intel-qat-plugin:0.27.0
|
||||||
securityContext:
|
securityContext:
|
||||||
seLinuxOptions:
|
seLinuxOptions:
|
||||||
type: "container_device_plugin_t"
|
type: "container_device_plugin_t"
|
||||||
|
@ -12,7 +12,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-qat-initcontainer:devel
|
image: intel/intel-qat-initcontainer:0.27.0
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
privileged: true
|
privileged: true
|
||||||
|
@ -16,7 +16,7 @@ spec:
|
|||||||
control-plane: controller-manager
|
control-plane: controller-manager
|
||||||
spec:
|
spec:
|
||||||
containers:
|
containers:
|
||||||
- image: intel/intel-sgx-admissionwebhook:devel
|
- image: intel/intel-sgx-admissionwebhook:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
name: manager
|
name: manager
|
||||||
securityContext:
|
securityContext:
|
||||||
|
@ -16,7 +16,7 @@ spec:
|
|||||||
automountServiceAccountToken: false
|
automountServiceAccountToken: false
|
||||||
containers:
|
containers:
|
||||||
- name: intel-sgx-plugin
|
- name: intel-sgx-plugin
|
||||||
image: intel/intel-sgx-plugin:devel
|
image: intel/intel-sgx-plugin:0.27.0
|
||||||
securityContext:
|
securityContext:
|
||||||
seLinuxOptions:
|
seLinuxOptions:
|
||||||
type: "container_device_plugin_t"
|
type: "container_device_plugin_t"
|
||||||
|
@ -7,7 +7,7 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
initContainers:
|
initContainers:
|
||||||
- name: intel-sgx-initcontainer
|
- name: intel-sgx-initcontainer
|
||||||
image: intel/intel-sgx-initcontainer:devel
|
image: intel/intel-sgx-initcontainer:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
@ -16,7 +16,7 @@ spec:
|
|||||||
serviceAccountName: sgx-plugin
|
serviceAccountName: sgx-plugin
|
||||||
containers:
|
containers:
|
||||||
- name: sgx-node-init
|
- name: sgx-node-init
|
||||||
image: intel/intel-sgx-initcontainer:devel
|
image: intel/intel-sgx-initcontainer:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
command:
|
command:
|
||||||
- /usr/local/bin/sgx-sw/intel-sgx-epchook
|
- /usr/local/bin/sgx-sw/intel-sgx-epchook
|
||||||
|
@ -21,7 +21,7 @@ spec:
|
|||||||
valueFrom:
|
valueFrom:
|
||||||
fieldRef:
|
fieldRef:
|
||||||
fieldPath: spec.nodeName
|
fieldPath: spec.nodeName
|
||||||
image: intel/intel-vpu-plugin:devel
|
image: intel/intel-vpu-plugin:0.27.0
|
||||||
imagePullPolicy: IfNotPresent
|
imagePullPolicy: IfNotPresent
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
|
@ -13,7 +13,7 @@ spec:
|
|||||||
path: "/etc/kubernetes/node-feature-discovery/features.d/"
|
path: "/etc/kubernetes/node-feature-discovery/features.d/"
|
||||||
containers:
|
containers:
|
||||||
- name: xelink-sidecar
|
- name: xelink-sidecar
|
||||||
image: intel/intel-xpumanager-sidecar:devel
|
image: intel/intel-xpumanager-sidecar:0.27.0
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
args:
|
args:
|
||||||
- -v=2
|
- -v=2
|
||||||
|
@ -181,7 +181,7 @@ func TestNewDaemonSetFPGA(t *testing.T) {
|
|||||||
|
|
||||||
plugin := &devicepluginv1.FpgaDevicePlugin{
|
plugin := &devicepluginv1.FpgaDevicePlugin{
|
||||||
Spec: devicepluginv1.FpgaDevicePluginSpec{
|
Spec: devicepluginv1.FpgaDevicePluginSpec{
|
||||||
InitImage: "intel/intel-fpga-initcontainer:devel",
|
InitImage: "intel/intel-fpga-initcontainer:0.27.0",
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -199,7 +199,7 @@ func TestNewDamonSetGPU(t *testing.T) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
if tc.isInitImage {
|
if tc.isInitImage {
|
||||||
plugin.Spec.InitImage = "intel/intel-gpu-initcontainer:devel"
|
plugin.Spec.InitImage = "intel/intel-gpu-initcontainer:0.27.0"
|
||||||
}
|
}
|
||||||
|
|
||||||
t.Run(tc.name, func(t *testing.T) {
|
t.Run(tc.name, func(t *testing.T) {
|
||||||
|
@ -37,7 +37,7 @@ import (
|
|||||||
|
|
||||||
var (
|
var (
|
||||||
bKeeper = &bookKeeper{}
|
bKeeper = &bookKeeper{}
|
||||||
ImageMinVersion = versionutil.MustParseSemantic("0.26.0")
|
ImageMinVersion = versionutil.MustParseSemantic("0.27.0")
|
||||||
)
|
)
|
||||||
|
|
||||||
func init() {
|
func init() {
|
||||||
|
@ -102,7 +102,7 @@ func runTestCase(ctx context.Context, fmw *framework.Framework, pluginKustomizat
|
|||||||
}
|
}
|
||||||
|
|
||||||
resource = v1.ResourceName(podResource)
|
resource = v1.ResourceName(podResource)
|
||||||
image := "intel/opae-nlb-demo:devel"
|
image := "intel/opae-nlb-demo:0.27.0"
|
||||||
|
|
||||||
ginkgo.By("submitting a pod requesting correct FPGA resources")
|
ginkgo.By("submitting a pod requesting correct FPGA resources")
|
||||||
|
|
||||||
|
@ -190,7 +190,7 @@ func runCpaSampleCode(ctx context.Context, f *framework.Framework, runTests int,
|
|||||||
Containers: []v1.Container{
|
Containers: []v1.Container{
|
||||||
{
|
{
|
||||||
Name: "openssl-qat-engine",
|
Name: "openssl-qat-engine",
|
||||||
Image: "intel/openssl-qat-engine:devel",
|
Image: "intel/openssl-qat-engine:0.27.0",
|
||||||
ImagePullPolicy: "IfNotPresent",
|
ImagePullPolicy: "IfNotPresent",
|
||||||
Command: []string{"cpa_sample_code", "runTests=" + strconv.Itoa(runTests), "signOfLife=1"},
|
Command: []string{"cpa_sample_code", "runTests=" + strconv.Itoa(runTests), "signOfLife=1"},
|
||||||
SecurityContext: &v1.SecurityContext{
|
SecurityContext: &v1.SecurityContext{
|
||||||
|
Loading…
Reference in New Issue
Block a user