Device plugins 0.34.0

charts/device-plugin-operator/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: intel-device-plugins-operator
 description: A Helm chart for Intel Device Plugins Operator for Kubernetes
 type: application
-version: 0.32.1
-appVersion: "0.32.1"
+version: 0.34.0
+appVersion: "0.34.0"

charts/device-plugin-operator/crds/deviceplugin.intel.com_dlbdeviceplugins.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: dlbdeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -31,7 +31,7 @@ spec:
     schema:
       openAPIV3Schema:
         description: |-
-          DlbDevicePlugin is the Schema for the dlbdeviceplugins API. It represents
+          DEPRECATED: DlbDevicePlugin is the Schema for the dlbdeviceplugins API. It represents
           the DLB device plugin responsible for advertising Intel DLB hardware resources to
           the kubelet.
         properties:

charts/device-plugin-operator/crds/deviceplugin.intel.com_dsadeviceplugins.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: dsadeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com

charts/device-plugin-operator/crds/deviceplugin.intel.com_fpgadeviceplugins.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: fpgadeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -31,7 +31,7 @@ spec:
     schema:
       openAPIV3Schema:
         description: |-
-          FpgaDevicePlugin is the Schema for the fpgadeviceplugins API. It represents
+          DEPRECATED: FpgaDevicePlugin is the Schema for the fpgadeviceplugins API. It represents
           the FPGA device plugin responsible for advertising Intel FPGA hardware resources to
           the kubelet.
         properties:

charts/device-plugin-operator/crds/deviceplugin.intel.com_gpudeviceplugins.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: gpudeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -55,6 +55,20 @@ spec:
           spec:
             description: GpuDevicePluginSpec defines the desired state of GpuDevicePlugin.
             properties:
+              allowIDs:
+                description: |-
+                  AllowIDs is a comma-separated list of PCI IDs of GPU devices that should only be advertised by the plugin.
+                  If not set, all devices are advertised.
+                  The list can contain IDs in the form of '0x1234,0x49a4,0x50b4'.
+                  Cannot be used together with DenyIDs.
+                type: string
+              denyIDs:
+                description: |-
+                  DenyIDs is a comma-separated list of PCI IDs of GPU devices that should only be denied by the plugin.
+                  If not set, all devices are advertised.
+                  The list can contain IDs in the form of '0x1234,0x49a4,0x50b4'.
+                  Cannot be used together with AllowIDs.
+                type: string
               enableMonitoring:
                 description: |-
                   EnableMonitoring enables the monitoring resource ('i915_monitoring')
@@ -81,16 +95,11 @@ spec:
                 description: |-
                   PreferredAllocationPolicy sets the mode of allocating GPU devices on a node.
                   See documentation for detailed description of the policies. Only valid when SharedDevNum > 1 is set.
-                  Not applicable with ResourceManager.
                 enum:
                 - balanced
                 - packed
                 - none
                 type: string
-              resourceManager:
-                description: ResourceManager handles the fractional resource management
-                  for multi-GPU nodes. Enable only for clusters with GPU Aware Scheduling.
-                type: boolean
               sharedDevNum:
                 description: SharedDevNum is a number of containers that can share
                   the same GPU device.

charts/device-plugin-operator/crds/deviceplugin.intel.com_iaadeviceplugins.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: iaadeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com

charts/device-plugin-operator/crds/deviceplugin.intel.com_npudeviceplugins.yaml

@@ -0,0 +1,191 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.18.0
+  name: npudeviceplugins.deviceplugin.intel.com
+spec:
+  group: deviceplugin.intel.com
+  names:
+    kind: NpuDevicePlugin
+    listKind: NpuDevicePluginList
+    plural: npudeviceplugins
+    singular: npudeviceplugin
+  scope: Cluster
+  versions:
+  - additionalPrinterColumns:
+    - jsonPath: .status.desiredNumberScheduled
+      name: Desired
+      type: integer
+    - jsonPath: .status.numberReady
+      name: Ready
+      type: integer
+    - jsonPath: .spec.nodeSelector
+      name: Node Selector
+      type: string
+    - jsonPath: .metadata.creationTimestamp
+      name: Age
+      type: date
+    name: v1
+    schema:
+      openAPIV3Schema:
+        description: |-
+          NpuDevicePlugin is the Schema for the npudeviceplugins API. It represents
+          the NPU device plugin responsible for advertising Intel NPU hardware resources to
+          the kubelet.
+        properties:
+          apiVersion:
+            description: |-
+              APIVersion defines the versioned schema of this representation of an object.
+              Servers should convert recognized schemas to the latest internal value, and
+              may reject unrecognized values.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+            type: string
+          kind:
+            description: |-
+              Kind is a string value representing the REST resource this object represents.
+              Servers may infer this from the endpoint the client submits requests to.
+              Cannot be updated.
+              In CamelCase.
+              More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: NpuDevicePluginSpec defines the desired state of NpuDevicePlugin.
+            properties:
+              image:
+                description: Image is a container image with NPU device plugin executable.
+                type: string
+              logLevel:
+                description: LogLevel sets the plugin's log level.
+                minimum: 0
+                type: integer
+              nodeSelector:
+                additionalProperties:
+                  type: string
+                description: NodeSelector provides a simple way to constrain device
+                  plugin pods to nodes with particular labels.
+                type: object
+              sharedDevNum:
+                description: SharedDevNum is a number of containers that can share
+                  the same NPU device.
+                minimum: 1
+                type: integer
+              tolerations:
+                description: Specialized nodes (e.g., with accelerators) can be Tainted
+                  to make sure unwanted pods are not scheduled on them. Tolerations
+                  can be set for the plugin pod to neutralize the Taint.
+                items:
+                  description: |-
+                    The pod this Toleration is attached to tolerates any taint that matches
+                    the triple <key,value,effect> using the matching operator <operator>.
+                  properties:
+                    effect:
+                      description: |-
+                        Effect indicates the taint effect to match. Empty means match all taint effects.
+                        When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute.
+                      type: string
+                    key:
+                      description: |-
+                        Key is the taint key that the toleration applies to. Empty means match all taint keys.
+                        If the key is empty, operator must be Exists; this combination means to match all values and all keys.
+                      type: string
+                    operator:
+                      description: |-
+                        Operator represents a key's relationship to the value.
+                        Valid operators are Exists and Equal. Defaults to Equal.
+                        Exists is equivalent to wildcard for value, so that a pod can
+                        tolerate all taints of a particular category.
+                      type: string
+                    tolerationSeconds:
+                      description: |-
+                        TolerationSeconds represents the period of time the toleration (which must be
+                        of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default,
+                        it is not set, which means tolerate the taint forever (do not evict). Zero and
+                        negative values will be treated as 0 (evict immediately) by the system.
+                      format: int64
+                      type: integer
+                    value:
+                      description: |-
+                        Value is the taint value the toleration matches to.
+                        If the operator is Exists, the value should be empty, otherwise just a regular string.
+                      type: string
+                  type: object
+                type: array
+            type: object
+          status:
+            description: NpuDevicePluginStatus defines the observed state of NpuDevicePlugin.
+            properties:
+              controlledDaemonSet:
+                description: ControlledDaemoSet references the DaemonSet controlled
+                  by the operator.
+                properties:
+                  apiVersion:
+                    description: API version of the referent.
+                    type: string
+                  fieldPath:
+                    description: |-
+                      If referring to a piece of an object instead of an entire object, this string
+                      should contain a valid JSON/Go field access statement, such as desiredState.manifest.containers[2].
+                      For example, if the object reference is to a container within a pod, this would take on a value like:
+                      "spec.containers{name}" (where "name" refers to the name of the container that triggered
+                      the event) or if no container name is specified "spec.containers[2]" (container with
+                      index 2 in this pod). This syntax is chosen only to have some well-defined way of
+                      referencing a part of an object.
+                    type: string
+                  kind:
+                    description: |-
+                      Kind of the referent.
+                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+                    type: string
+                  name:
+                    description: |-
+                      Name of the referent.
+                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                    type: string
+                  namespace:
+                    description: |-
+                      Namespace of the referent.
+                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
+                    type: string
+                  resourceVersion:
+                    description: |-
+                      Specific resourceVersion to which this reference is made, if any.
+                      More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#concurrency-control-and-consistency
+                    type: string
+                  uid:
+                    description: |-
+                      UID of the referent.
+                      More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#uids
+                    type: string
+                type: object
+                x-kubernetes-map-type: atomic
+              desiredNumberScheduled:
+                description: |-
+                  The total number of nodes that should be running the device plugin
+                  pod (including nodes correctly running the device plugin pod).
+                format: int32
+                type: integer
+              nodeNames:
+                description: The list of Node names where the device plugin pods are
+                  running.
+                items:
+                  type: string
+                type: array
+              numberReady:
+                description: |-
+                  The number of nodes that should be running the device plugin pod and have one
+                  or more of the device plugin pod running and ready.
+                format: int32
+                type: integer
+            required:
+            - desiredNumberScheduled
+            - numberReady
+            type: object
+        type: object
+    served: true
+    storage: true
+    subresources:
+      status: {}

charts/device-plugin-operator/crds/deviceplugin.intel.com_qatdeviceplugins.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: qatdeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -83,6 +83,7 @@ spec:
                   - 4xxxvf
                   - 420xxvf
                   - c4xxxvf
+                  - 6xxxvf
                   type: string
                 type: array
               logLevel:

charts/device-plugin-operator/crds/deviceplugin.intel.com_sgxdeviceplugins.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: sgxdeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -55,6 +55,10 @@ spec:
           spec:
             description: SgxDevicePluginSpec defines the desired state of SgxDevicePlugin.
             properties:
+              dcapInfraResources:
+                description: DcapInfraResources flag enables two special resources
+                  for Intel DCAP infrastructure containers.
+                type: boolean
               enclaveLimit:
                 description: EnclaveLimit is a number of containers that can share
                   the same SGX enclave device.

charts/device-plugin-operator/crds/fpga.intel.com_acceleratorfunctions.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: acceleratorfunctions.fpga.intel.com
 spec:
   group: fpga.intel.com

charts/device-plugin-operator/crds/fpga.intel.com_fpgaregions.yaml

@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.16.1
+    controller-gen.kubebuilder.io/version: v0.18.0
   name: fpgaregions.fpga.intel.com
 spec:
   group: fpga.intel.com

charts/device-plugin-operator/templates/operator.yaml

@@ -114,6 +114,7 @@ rules:
   - fpgadeviceplugins
   - gpudeviceplugins
   - iaadeviceplugins
+  - npudeviceplugins
   - qatdeviceplugins
   - sgxdeviceplugins
   verbs:
@@ -327,6 +328,10 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+        {{- if .Values.privateRegistry.registrySecret }}
+        - name: DEVICEPLUGIN_SECRET
+          value: {{ .Release.Name }}-operator-private-registry
+        {{- end }}
         image: "{{ .Values.manager.image.hub }}/intel-deviceplugin-operator:{{ .Values.manager.image.tag | default .Chart.AppVersion  }}"
         imagePullPolicy: {{ .Values.manager.image.pullPolicy }}
         livenessProbe:

charts/device-plugin-operator/values.yaml

@@ -9,9 +9,7 @@ manager:
 
   # supported devices by the operator
   devices:
-    # dlb: true
     # dsa: true
-    # fpga: true
     # gpu: true
     # iaa: true
     # qat: true

charts/dsa-device-plugin/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: intel-device-plugins-dsa
 description: A Helm chart for Intel DSA Device Plugin
 type: application
-version: 0.32.1
-appVersion: "0.32.1"
+version: 0.34.0
+appVersion: "0.34.0"