Commit Graph

342 Commits

Author SHA1 Message Date
Tuomas Katila
afb6552527 operator: set pod security admission to privileged
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-04-16 11:15:08 +03:00
Hyeongju Johannes Lee
b1b03e696e operator, kubebuilder: update to v4
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2025-03-13 14:42:00 +02:00
Hyeongju Johannes Lee
b3459a4d17 operator: fix outdated information
update documentation in DEVEL.md too

Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2025-03-13 14:42:00 +02:00
Hyeongju Johannes Lee
d6ca49bb9d operator: remove residue of scorecard
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2025-03-13 14:42:00 +02:00
Tuomas Katila
2cbc3d55dd operator: update images to 0.32.0
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-01-30 09:56:49 +02:00
Tuomas Katila
c339e6ed63 nfd: gpu: update device IDs
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-01-29 11:48:27 +02:00
Mikko Ylinen
a70fb7f7a7 deployments: nfd: update DSA/IAA PCI IDs and nfd version
Based on
4fecf944c0
f91f2a9879

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-28 09:23:43 +02:00
Mikko Ylinen
fe3eaeeb0b qat: drop AppArmor annotations
"unconfined" annotation was needed to get writes to new_id / bind
to succeed on AppArmor enabled OSes.

However, many things have changed:

* new_id should not be used anymore and it was dropped in the plugin.
* QAT initcontainer has assumed the role of HW initialization.
* vfio-pci is the preferred "dpdkDriver" and starting with QAT Gen4, it
is the only available VF driver so unbind isn't necessary.
* k8s AppArmor is "GA" since 1.30 and the annotation is deprecated.

As of now, the initcontainer will take care of binding QAT VFs to vfio-pci
so the plugin does not neeed to set AppArmor at all.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-16 13:54:37 +02:00
Tuomas Katila
74006cda80 depl: drop capabilities from all plugins
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-01-02 15:42:32 +02:00
Mikko Ylinen
ed5d1e6269 make: update controller-gen to v0.17
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-02 12:00:34 +02:00
Mikko Ylinen
2e4bdc2c06 deployments: update NFD to v0.17.0
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-02 12:00:34 +02:00
Tuomas Katila
e34355940a operator: drop rbac-proxy in favor of controller-runtime's authz/authn
rbac-proxy will be deprecated in 2025

Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-12-17 10:17:14 +02:00
Tuomas Katila
8e6b3be00a update main with 0.31.1 release changes
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-10-18 10:38:22 +03:00
Hyeongju Johannes Lee
3a49857fcd operator: change name prefix of controller-manager
To sync with operator bundle that has been 'intel-deviceplugins-'
since 0.30.0 version, change the name prefix.

Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-10-01 14:33:05 +03:00
Tuomas Katila
beac9a3d16 operator: update images to 0.31.0
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-30 13:25:37 +03:00
Tuomas Katila
fedee94609 operator: kube-rbac-proxy to 0.18.1
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-26 13:45:15 +03:00
Hyeongju Johannes Lee
3b08a9074d Add cpu/memory requests and limits
Operator maturity level 3 requires cpu/memory requests and limits
for operands. Add them to all plugins deployed by operator

Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-09-25 03:42:19 -07:00
Mikko Ylinen
57ed2c3864 iaa/dsa: add driver_name for default configs
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-09-24 09:06:32 +03:00
Tuomas Katila
518a8606ff gpu: add levelzero sidecar support for plugin and the deployment files
In addition to the levelzero's health data use, this adds support to
scan devices in WSL. Scanning happens by retrieving Intel device
indices from the Level-Zero API.

Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-19 19:14:15 +03:00
Tuomas Katila
402fb8d9cd gpu: add support for CDI devices
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-11 09:29:55 +03:00
Tuomas Katila
f08998aae0 xpumanager sidecar: remove HTTPS use without certificates
Add deployment that uses cert-manager to provide self-signed certificates
Add functionality to verify server endpoint in the sidecar

Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-08-30 14:36:21 +03:00
Tuomas Katila
42c34a74a4 tls: drop additional ciphers
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-08-21 12:28:02 +03:00
Tuomas Katila
19c2ad2da4 rbac proxy: drop lower quality tls cipher
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-08-20 11:46:12 +03:00
Mikko Ylinen
ff257cb2d2 operator: move to controller-tools v0.16.1
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-08-15 10:02:39 +03:00
Mikko Ylinen
e59faa8d06 deployments: update NFD to v0.16.4
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-08-15 09:52:01 +03:00
Hyeongju Johannes Lee
ba9b012ab1 sgx: add updateStrategy to daemonSet
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:55:26 +03:00
Hyeongju Johannes Lee
94833289d5 iaa: add updateStrategy to daemonSet
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:55:08 +03:00
Hyeongju Johannes Lee
83aa236e70 gpu: add updateStrategy to daemonSet
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:54:30 +03:00
Hyeongju Johannes Lee
c7ef05fe28 fpga: add updateStrategy to daemonSet
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:53:56 +03:00
Hyeongju Johannes Lee
c04224746d dsa: add updateStrategy to daemonSet
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:53:35 +03:00
Hyeongju Johannes Lee
0d12bf453d dlb: add updateStrategy to daemonSet
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:53:13 +03:00
Hyeongju Johannes Lee
31f3951682 qat: add updateStrategy to daemonSet
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:42:07 +03:00
Mikko Ylinen
5a59385a09 qat: drop c6xxvf from defaults
The devices searched by default are QAT Gen4+ only.

Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-06-11 07:31:49 +03:00
Tuomas Katila
11c9753aca
Merge pull request #1745 from bart0sh/PR155-fpga-support-CDI
FPGA: support CDI
2024-05-28 11:19:58 +03:00
Ed Bartosh
8eac8b5edd fpga: remove generation of the CRI-O hook 2024-05-22 14:57:03 +03:00
Mikko Ylinen
a10c0ecc05
Merge pull request #1739 from tkatila/post-0.30.0-updates
Post 0.30.0 updates
2024-05-15 12:23:00 +03:00
Tuomas Katila
cd8a911c08 operator: update images to 0.30.0
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-05-15 11:26:47 +03:00
Hyeongju Johannes Lee
2af37fd4cb qat_dpdk_app: drop generic
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-05-07 20:46:12 +03:00
Mikko Ylinen
f0cfac0353 deployments: update to NFD v0.15.4
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-05-03 12:59:20 +03:00
Mikko Ylinen
dfe843e4b6 operator: update kube-rbac-proxy to v0.16.0
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-05-03 12:57:43 +03:00
Tuomas Katila
05bb8ef156 qat: add support for 420xx driver and its devices (4946)
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-05-02 11:36:13 +03:00
Mikko Ylinen
61e38e04f7
Merge pull request #1686 from tkatila/operator-tolations-labels 2024-03-21 17:28:31 +02:00
Tuomas Katila
6a4434bd7f operator: add differentiation label
Add one device plugin specific label to differentiate our operator
from all the possible operators within same namespace.

Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-20 10:00:46 +02:00
Tuomas Katila
52be7ed1e9 Add tolerations support to operator and plugin CRDs
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-20 10:00:41 +02:00
Tuomas Katila
4946b26018 gpu: doc: monitoring resource notes
Also align xelink-sidecar deployment with the new files in
the xpu manager project.

Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-13 08:16:16 +02:00
Tuomas Katila
a3d3e9e687 nfd: gpu: allow i915 and xe drivers both compiled-in and as modules
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-12 11:34:05 +02:00
Mikko Ylinen
06dc494982 operator: update to controller-gen v0.14 and generate CRDs with it
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-02-12 10:33:53 +02:00
Mikko Ylinen
d2dd2fd810 deployments: update to NFD v0.15.x
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-02-05 15:41:21 +02:00
Tuomas Katila
7e8aba1e6c Fix false failures with trivy config scan
Sadly GH's trivy-action doesn't support the trivyignore.yaml file.
The whole detection class needs to be ignored.

Include the .yaml file for future use.

Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-01-17 12:15:47 +02:00
Oleg Zhurakivskyy
ab0e8bc146 qat: Add annotation configurability in the operator
Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
2024-01-09 10:20:16 +02:00