Device plugins 0.31 (#61)

* device plugins: operator: sync with base project -Newer rbac-proxy and different origin -Limit TLS selection -Update ClusterRole Signed-off-by: Tuomas Katila <[email protected]> * device plugins: sync crds Signed-off-by: Tuomas Katila <[email protected]> * device plugins: qat: drop c6xxvf from defaults Signed-off-by: Tuomas Katila <[email protected]> * device plugins: readme updates Signed-off-by: Tuomas Katila <[email protected]> * device plugins: update version to 0.31.0 Signed-off-by: Tuomas Katila <[email protected]> --------- Signed-off-by: Tuomas Katila <[email protected]>
intel · Sep 30, 2024 · faabcf5 · faabcf5
1 parent 5867b43
commit faabcf5
Show file tree

Hide file tree

Showing 21 changed files with 52 additions and 188 deletions.
diff --git a/charts/device-plugin-operator/Chart.yaml b/charts/device-plugin-operator/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: intel-device-plugins-operator
 description: A Helm chart for Intel Device Plugins Operator for Kubernetes
 type: application
-version: 0.30.0
-appVersion: "0.30.0"
+version: 0.31.0
+appVersion: "0.31.0"
diff --git a/charts/device-plugin-operator/README.md b/charts/device-plugin-operator/README.md
@@ -44,8 +44,9 @@ You may also run `helm show values` on this chart's dependencies for additional
 |---------|-----------|
 | `manager.image.hub` | `intel` |
 | `manager.image.tag` | `` |
-| `kubeRbacProxy.image.hub` | `gcr.io` |
-| `kubeRbacProxy.image.tag` | `v0.16.0` |
+| `kubeRbacProxy.image.hub` | `quay.io` |
+| `kubeRbacProxy.image.hubRepo` | `brancz` |
+| `kubeRbacProxy.image.tag` | `v0.18.1` |
 | `kubeRbacProxy.image.pullPolicy` | `IfNotPresent` |
 | `privateRegistry.registryUrl` | `` |
 | `privateRegistry.registryUser` | `` |

diff --git a/charts/device-plugin-operator/crds/deviceplugin.intel.com_dlbdeviceplugins.yaml b/charts/device-plugin-operator/crds/deviceplugin.intel.com_dlbdeviceplugins.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: dlbdeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -133,7 +133,6 @@ spec:
                       the event) or if no container name is specified "spec.containers[2]" (container with
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
-                      TODO: this design is not final and this field is subject to change in the future.
                     type: string
                   kind:
                     description: |-

diff --git a/charts/device-plugin-operator/crds/deviceplugin.intel.com_dsadeviceplugins.yaml b/charts/device-plugin-operator/crds/deviceplugin.intel.com_dsadeviceplugins.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: dsadeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -143,7 +143,6 @@ spec:
                       the event) or if no container name is specified "spec.containers[2]" (container with
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
-                      TODO: this design is not final and this field is subject to change in the future.
                     type: string
                   kind:
                     description: |-

diff --git a/charts/device-plugin-operator/crds/deviceplugin.intel.com_fpgadeviceplugins.yaml b/charts/device-plugin-operator/crds/deviceplugin.intel.com_fpgadeviceplugins.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: fpgadeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -140,7 +140,6 @@ spec:
                       the event) or if no container name is specified "spec.containers[2]" (container with
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
-                      TODO: this design is not final and this field is subject to change in the future.
                     type: string
                   kind:
                     description: |-

diff --git a/charts/device-plugin-operator/crds/deviceplugin.intel.com_gpudeviceplugins.yaml b/charts/device-plugin-operator/crds/deviceplugin.intel.com_gpudeviceplugins.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: gpudeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -139,9 +139,7 @@ spec:
                 type: array
             type: object
           status:
-            description: |-
-              GpuDevicePluginStatus defines the observed state of GpuDevicePlugin.
-              TODO(rojkov): consider code deduplication with QatDevicePluginStatus.
+            description: GpuDevicePluginStatus defines the observed state of GpuDevicePlugin.
             properties:
               controlledDaemonSet:
                 description: ControlledDaemoSet references the DaemonSet controlled
@@ -159,7 +157,6 @@ spec:
                       the event) or if no container name is specified "spec.containers[2]" (container with
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
-                      TODO: this design is not final and this field is subject to change in the future.
                     type: string
                   kind:
                     description: |-

diff --git a/charts/device-plugin-operator/crds/deviceplugin.intel.com_iaadeviceplugins.yaml b/charts/device-plugin-operator/crds/deviceplugin.intel.com_iaadeviceplugins.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: iaadeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -142,7 +142,6 @@ spec:
                       the event) or if no container name is specified "spec.containers[2]" (container with
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
-                      TODO: this design is not final and this field is subject to change in the future.
                     type: string
                   kind:
                     description: |-

diff --git a/charts/device-plugin-operator/crds/deviceplugin.intel.com_qatdeviceplugins.yaml b/charts/device-plugin-operator/crds/deviceplugin.intel.com_qatdeviceplugins.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: qatdeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -155,9 +155,7 @@ spec:
                 type: array
             type: object
           status:
-            description: |-
-              QatDevicePluginStatus defines the observed state of QatDevicePlugin.
-              TODO(rojkov): consider code deduplication with GpuDevicePluginStatus.
+            description: QatDevicePluginStatus defines the observed state of QatDevicePlugin.
             properties:
               controlledDaemonSet:
                 description: ControlledDaemoSet references the DaemonSet controlled
@@ -175,7 +173,6 @@ spec:
                       the event) or if no container name is specified "spec.containers[2]" (container with
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
-                      TODO: this design is not final and this field is subject to change in the future.
                     type: string
                   kind:
                     description: |-

diff --git a/charts/device-plugin-operator/crds/deviceplugin.intel.com_sgxdeviceplugins.yaml b/charts/device-plugin-operator/crds/deviceplugin.intel.com_sgxdeviceplugins.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: sgxdeviceplugins.deviceplugin.intel.com
 spec:
   group: deviceplugin.intel.com
@@ -144,7 +144,6 @@ spec:
                       the event) or if no container name is specified "spec.containers[2]" (container with
                       index 2 in this pod). This syntax is chosen only to have some well-defined way of
                       referencing a part of an object.
-                      TODO: this design is not final and this field is subject to change in the future.
                     type: string
                   kind:
                     description: |-

diff --git a/charts/device-plugin-operator/crds/fpga.intel.com_acceleratorfunctions.yaml b/charts/device-plugin-operator/crds/fpga.intel.com_acceleratorfunctions.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: acceleratorfunctions.fpga.intel.com
 spec:
   group: fpga.intel.com

diff --git a/charts/device-plugin-operator/crds/fpga.intel.com_fpgaregions.yaml b/charts/device-plugin-operator/crds/fpga.intel.com_fpgaregions.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.16.1
   name: fpgaregions.fpga.intel.com
 spec:
   group: fpga.intel.com

diff --git a/charts/device-plugin-operator/templates/operator.yaml b/charts/device-plugin-operator/templates/operator.yaml
@@ -54,6 +54,13 @@ metadata:
   creationTimestamp: null
   name: inteldeviceplugins-manager-role
 rules:
+- apiGroups:
+  - ""
+  resources:
+  - nodes/proxy
+  verbs:
+  - get
+  - list
 - apiGroups:
   - ""
   resources:
@@ -103,155 +110,11 @@ rules:
   - deviceplugin.intel.com
   resources:
   - dlbdeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - dlbdeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - dlbdeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - dsadeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - dsadeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - dsadeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - fpgadeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - fpgadeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - fpgadeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - gpudeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - gpudeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - gpudeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - iaadeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - iaadeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - qatdeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - qatdeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - qatdeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - sgxdeviceplugins
   verbs:
   - create
@@ -264,12 +127,24 @@ rules:
 - apiGroups:
   - deviceplugin.intel.com
   resources:
+  - dlbdeviceplugins/finalizers
+  - dsadeviceplugins/finalizers
+  - fpgadeviceplugins/finalizers
+  - gpudeviceplugins/finalizers
+  - iaadeviceplugins/finalizers
+  - qatdeviceplugins/finalizers
   - sgxdeviceplugins/finalizers
   verbs:
   - update
 - apiGroups:
   - deviceplugin.intel.com
   resources:
+  - dlbdeviceplugins/status
+  - dsadeviceplugins/status
+  - fpgadeviceplugins/status
+  - gpudeviceplugins/status
+  - iaadeviceplugins/status
+  - qatdeviceplugins/status
   - sgxdeviceplugins/status
   verbs:
   - get
@@ -469,7 +344,7 @@ spec:
         - --secure-listen-address=0.0.0.0:8443
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
-        - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+        - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
         - --v=10
         image: "{{ .Values.kubeRbacProxy.image.hub }}/{{ .Values.kubeRbacProxy.image.hubRepo }}/kube-rbac-proxy:{{ .Values.kubeRbacProxy.image.tag }}"
         name: kube-rbac-proxy

diff --git a/charts/device-plugin-operator/values.yaml b/charts/device-plugin-operator/values.yaml
@@ -9,9 +9,9 @@ manager:
 
 kubeRbacProxy:
   image:
-    hub: gcr.io
-    hubRepo: kubebuilder
-    tag: v0.16.0
+    hub: quay.io
+    hubRepo: brancz
+    tag: v0.18.1
     pullPolicy: IfNotPresent
 
 privateRegistry: