Tuomas Katila
afb6552527
operator: set pod security admission to privileged
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-04-16 11:15:08 +03:00
Hyeongju Johannes Lee
b1b03e696e
operator, kubebuilder: update to v4
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2025-03-13 14:42:00 +02:00
Hyeongju Johannes Lee
b3459a4d17
operator: fix outdated information
...
update documentation in DEVEL.md too
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2025-03-13 14:42:00 +02:00
Hyeongju Johannes Lee
d6ca49bb9d
operator: remove residue of scorecard
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2025-03-13 14:42:00 +02:00
Tuomas Katila
2cbc3d55dd
operator: update images to 0.32.0
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-01-30 09:56:49 +02:00
Tuomas Katila
c339e6ed63
nfd: gpu: update device IDs
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-01-29 11:48:27 +02:00
Mikko Ylinen
a70fb7f7a7
deployments: nfd: update DSA/IAA PCI IDs and nfd version
...
Based on
4fecf944c0
f91f2a9879
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-28 09:23:43 +02:00
Mikko Ylinen
fe3eaeeb0b
qat: drop AppArmor annotations
...
"unconfined" annotation was needed to get writes to new_id / bind
to succeed on AppArmor enabled OSes.
However, many things have changed:
* new_id should not be used anymore and it was dropped in the plugin.
* QAT initcontainer has assumed the role of HW initialization.
* vfio-pci is the preferred "dpdkDriver" and starting with QAT Gen4, it
is the only available VF driver so unbind isn't necessary.
* k8s AppArmor is "GA" since 1.30 and the annotation is deprecated.
As of now, the initcontainer will take care of binding QAT VFs to vfio-pci
so the plugin does not neeed to set AppArmor at all.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-16 13:54:37 +02:00
Tuomas Katila
74006cda80
depl: drop capabilities from all plugins
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2025-01-02 15:42:32 +02:00
Mikko Ylinen
ed5d1e6269
make: update controller-gen to v0.17
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-02 12:00:34 +02:00
Mikko Ylinen
2e4bdc2c06
deployments: update NFD to v0.17.0
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2025-01-02 12:00:34 +02:00
Tuomas Katila
e34355940a
operator: drop rbac-proxy in favor of controller-runtime's authz/authn
...
rbac-proxy will be deprecated in 2025
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-12-17 10:17:14 +02:00
Tuomas Katila
8e6b3be00a
update main with 0.31.1 release changes
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-10-18 10:38:22 +03:00
Hyeongju Johannes Lee
3a49857fcd
operator: change name prefix of controller-manager
...
To sync with operator bundle that has been 'intel-deviceplugins-'
since 0.30.0 version, change the name prefix.
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-10-01 14:33:05 +03:00
Tuomas Katila
beac9a3d16
operator: update images to 0.31.0
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-30 13:25:37 +03:00
Tuomas Katila
fedee94609
operator: kube-rbac-proxy to 0.18.1
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-26 13:45:15 +03:00
Hyeongju Johannes Lee
3b08a9074d
Add cpu/memory requests and limits
...
Operator maturity level 3 requires cpu/memory requests and limits
for operands. Add them to all plugins deployed by operator
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-09-25 03:42:19 -07:00
Mikko Ylinen
57ed2c3864
iaa/dsa: add driver_name for default configs
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-09-24 09:06:32 +03:00
Tuomas Katila
518a8606ff
gpu: add levelzero sidecar support for plugin and the deployment files
...
In addition to the levelzero's health data use, this adds support to
scan devices in WSL. Scanning happens by retrieving Intel device
indices from the Level-Zero API.
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-19 19:14:15 +03:00
Tuomas Katila
402fb8d9cd
gpu: add support for CDI devices
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-09-11 09:29:55 +03:00
Tuomas Katila
f08998aae0
xpumanager sidecar: remove HTTPS use without certificates
...
Add deployment that uses cert-manager to provide self-signed certificates
Add functionality to verify server endpoint in the sidecar
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-08-30 14:36:21 +03:00
Tuomas Katila
42c34a74a4
tls: drop additional ciphers
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-08-21 12:28:02 +03:00
Tuomas Katila
19c2ad2da4
rbac proxy: drop lower quality tls cipher
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-08-20 11:46:12 +03:00
Mikko Ylinen
ff257cb2d2
operator: move to controller-tools v0.16.1
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-08-15 10:02:39 +03:00
Mikko Ylinen
e59faa8d06
deployments: update NFD to v0.16.4
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-08-15 09:52:01 +03:00
Hyeongju Johannes Lee
ba9b012ab1
sgx: add updateStrategy to daemonSet
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:55:26 +03:00
Hyeongju Johannes Lee
94833289d5
iaa: add updateStrategy to daemonSet
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:55:08 +03:00
Hyeongju Johannes Lee
83aa236e70
gpu: add updateStrategy to daemonSet
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:54:30 +03:00
Hyeongju Johannes Lee
c7ef05fe28
fpga: add updateStrategy to daemonSet
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:53:56 +03:00
Hyeongju Johannes Lee
c04224746d
dsa: add updateStrategy to daemonSet
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:53:35 +03:00
Hyeongju Johannes Lee
0d12bf453d
dlb: add updateStrategy to daemonSet
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:53:13 +03:00
Hyeongju Johannes Lee
31f3951682
qat: add updateStrategy to daemonSet
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-07-25 12:42:07 +03:00
Mikko Ylinen
5a59385a09
qat: drop c6xxvf from defaults
...
The devices searched by default are QAT Gen4+ only.
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-06-11 07:31:49 +03:00
Tuomas Katila
11c9753aca
Merge pull request #1745 from bart0sh/PR155-fpga-support-CDI
...
FPGA: support CDI
2024-05-28 11:19:58 +03:00
Ed Bartosh
8eac8b5edd
fpga: remove generation of the CRI-O hook
2024-05-22 14:57:03 +03:00
Mikko Ylinen
a10c0ecc05
Merge pull request #1739 from tkatila/post-0.30.0-updates
...
Post 0.30.0 updates
2024-05-15 12:23:00 +03:00
Tuomas Katila
cd8a911c08
operator: update images to 0.30.0
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-05-15 11:26:47 +03:00
Hyeongju Johannes Lee
2af37fd4cb
qat_dpdk_app: drop generic
...
Signed-off-by: Hyeongju Johannes Lee <hyeongju.lee@intel.com>
2024-05-07 20:46:12 +03:00
Mikko Ylinen
f0cfac0353
deployments: update to NFD v0.15.4
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-05-03 12:59:20 +03:00
Mikko Ylinen
dfe843e4b6
operator: update kube-rbac-proxy to v0.16.0
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-05-03 12:57:43 +03:00
Tuomas Katila
05bb8ef156
qat: add support for 420xx driver and its devices (4946)
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-05-02 11:36:13 +03:00
Mikko Ylinen
61e38e04f7
Merge pull request #1686 from tkatila/operator-tolations-labels
2024-03-21 17:28:31 +02:00
Tuomas Katila
6a4434bd7f
operator: add differentiation label
...
Add one device plugin specific label to differentiate our operator
from all the possible operators within same namespace.
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-20 10:00:46 +02:00
Tuomas Katila
52be7ed1e9
Add tolerations support to operator and plugin CRDs
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-20 10:00:41 +02:00
Tuomas Katila
4946b26018
gpu: doc: monitoring resource notes
...
Also align xelink-sidecar deployment with the new files in
the xpu manager project.
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-13 08:16:16 +02:00
Tuomas Katila
a3d3e9e687
nfd: gpu: allow i915 and xe drivers both compiled-in and as modules
...
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-03-12 11:34:05 +02:00
Mikko Ylinen
06dc494982
operator: update to controller-gen v0.14 and generate CRDs with it
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-02-12 10:33:53 +02:00
Mikko Ylinen
d2dd2fd810
deployments: update to NFD v0.15.x
...
Signed-off-by: Mikko Ylinen <mikko.ylinen@intel.com>
2024-02-05 15:41:21 +02:00
Tuomas Katila
7e8aba1e6c
Fix false failures with trivy config scan
...
Sadly GH's trivy-action doesn't support the trivyignore.yaml file.
The whole detection class needs to be ignored.
Include the .yaml file for future use.
Signed-off-by: Tuomas Katila <tuomas.katila@intel.com>
2024-01-17 12:15:47 +02:00
Oleg Zhurakivskyy
ab0e8bc146
qat: Add annotation configurability in the operator
...
Signed-off-by: Oleg Zhurakivskyy <oleg.zhurakivskyy@intel.com>
2024-01-09 10:20:16 +02:00