Merge pull request #828 from mythi/PR-2021-077

bart0sh · web-flow · commit cdf4905bfc7b · 2021-12-23T18:40:14.000+02:00
release-0.23 content
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -4,9 +4,9 @@ on:
   push:
     branches:
         - main
-        - release-0.20
         - release-0.21
         - release-0.22
+        - release-0.23
 
 jobs:
   build:
@@ -42,36 +42,36 @@ jobs:
     - uses: actions/checkout@v2
       with:
         fetch-depth: 0
-        ref: release-0.20
-    - name: Build release-0.20
+        ref: release-0.21
+    - name: Build release-0.21
       run: |
         GITHUB_SHA=$(git rev-parse HEAD)
         export GITHUB_SHA
         rm -rf _work/venv
         make vhtml
-        mv _build/html $HOME/output/0.20
+        mv _build/html $HOME/output/0.21
     - uses: actions/checkout@v2
       with:
         fetch-depth: 0
-        ref: release-0.21
-    - name: Build release-0.21
+        ref: release-0.22
+    - name: Build release-0.22
       run: |
         GITHUB_SHA=$(git rev-parse HEAD)
         export GITHUB_SHA
         rm -rf _work/venv
         make vhtml
-        mv _build/html $HOME/output/0.21
+        mv _build/html $HOME/output/0.22
     - uses: actions/checkout@v2
       with:
         fetch-depth: 0
-        ref: release-0.22
-    - name: Build release-0.22
+        ref: release-0.23
+    - name: Build release-0.23
       run: |
         GITHUB_SHA=$(git rev-parse HEAD)
         export GITHUB_SHA
         rm -rf _work/venv
         make vhtml
-        mv _build/html $HOME/output/0.22
+        mv _build/html $HOME/output/0.23
     - name: Deploy the docs
       shell: bash
       env:
diff --git a/Makefile b/Makefile
@@ -67,9 +67,9 @@ endif
 
 test-with-kind: fixture
 	@build/docker/build-image.sh intel/intel-fpga-admissionwebhook buildah
-	@$(PODMAN) tag localhost/intel/intel-fpga-admissionwebhook:devel docker.io/intel/intel-fpga-admissionwebhook:devel
+	@$(PODMAN) tag localhost/intel/intel-fpga-admissionwebhook:0.23.0 docker.io/intel/intel-fpga-admissionwebhook:0.23.0
 	@mkdir -p $(e2e_tmp_dir)
-	@$(PODMAN) save "docker.io/intel/intel-fpga-admissionwebhook:devel" -o $(e2e_tmp_dir)/$(WEBHOOK_IMAGE_FILE)
+	@$(PODMAN) save "docker.io/intel/intel-fpga-admissionwebhook:0.23.0" -o $(e2e_tmp_dir)/$(WEBHOOK_IMAGE_FILE)
 	@$(KIND) create cluster --name "intel-device-plugins" --kubeconfig $(e2e_tmp_dir)/kubeconfig --image "kindest/node:v1.19.0"
 	@$(KIND) load image-archive --name "intel-device-plugins" $(e2e_tmp_dir)/$(WEBHOOK_IMAGE_FILE)
 	$(KUBECTL) --kubeconfig=$(e2e_tmp_dir)/kubeconfig apply -f https://github.com/jetstack/cert-manager/releases/download/v1.3.1/cert-manager.yaml
@@ -129,7 +129,7 @@ clean:
 
 ORG?=intel
 REG?=$(ORG)/
-TAG?=devel
+TAG?=0.23.0
 export TAG
 
 e2e-fpga:
diff --git a/README.md b/README.md
@@ -7,8 +7,8 @@ This repository contains a framework for developing plugins for the Kubernetes
 [device plugins framework](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/),
 along with a number of device plugin implementations utilising that framework.
 
-The [v0.22 release](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/latest)
-is the latest feature release with its documentation available [here](https://intel.github.io/intel-device-plugins-for-kubernetes/0.22/).
+The [v0.23 release](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/latest)
+is the latest feature release with its documentation available [here](https://intel.github.io/intel-device-plugins-for-kubernetes/0.23/).
 
 Table of Contents
 
@@ -19,7 +19,7 @@ Table of Contents
     * [QAT device plugin](#qat-device-plugin)
     * [VPU device plugin](#vpu-device-plugin)
     * [SGX device plugin](#sgx-device-plugin)
-    * [DSA device pugin](#dsa-device-plugin)
+    * [DSA device plugin](#dsa-device-plugin)
     * [DLB device plugin](#dlb-device-plugin)
 * [Device Plugins Operator](#device-plugins-operator)
 * [Demos](#demos)
@@ -256,9 +256,10 @@ matching Kubernetes versions are listed below:
 
 | Branch            | Kubernetes branch/version      | Status      |
 |:------------------|:-------------------------------|:------------|
+| release-0.23      | Kubernetes 1.23 branch v1.23.x | supported   |
 | release-0.22      | Kubernetes 1.22 branch v1.22.x | supported   |
 | release-0.21      | Kubernetes 1.21 branch v1.21.x | supported   |
-| release-0.20      | Kubernetes 1.20 branch v1.20.x | supported   |
+| release-0.20      | Kubernetes 1.20 branch v1.20.x | unsupported |
 | release-0.19      | Kubernetes 1.19 branch v1.19.x | unsupported |
 | release-0.18      | Kubernetes 1.18 branch v1.18.x | unsupported |
 | release-0.17      | Kubernetes 1.17 branch v1.17.x | unsupported |
diff --git a/demo/crypto-perf/Dockerfile b/demo/crypto-perf/Dockerfile
@@ -6,11 +6,11 @@
 #
 # This is used on release branches before tagging a stable version.
 # The main branch defaults to using the latest Clear Linux.
-ARG CLEAR_LINUX_BASE=clearlinux:latest
+ARG CLEAR_LINUX_BASE=clearlinux@sha256:c93ccb9f87ce9723e7bdc39fa615b18c68c7245f3f1f65865e9abe4b1374c2d5
 
 FROM ${CLEAR_LINUX_BASE} as builder
 
-ARG CLEAR_LINUX_VERSION=
+ARG CLEAR_LINUX_VERSION="--version=35460"
 
 RUN mkdir /install_root && \
     swupd os-install \
diff --git a/demo/intelfpga-job.yaml b/demo/intelfpga-job.yaml
@@ -13,7 +13,7 @@ spec:
       restartPolicy: Never
       containers:
         - name: intelfpga-demo-job-1
-          image: intel/opae-nlb-demo:devel
+          image: intel/opae-nlb-demo:0.23.0
           imagePullPolicy: IfNotPresent
           securityContext:
             capabilities:
diff --git a/demo/test-fpga-orchestrated.yaml b/demo/test-fpga-orchestrated.yaml
@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: test-container
-    image: intel/opae-nlb-demo:devel
+    image: intel/opae-nlb-demo:0.23.0
     imagePullPolicy: IfNotPresent
     securityContext:
       capabilities:
diff --git a/demo/test-fpga-preprogrammed.yaml b/demo/test-fpga-preprogrammed.yaml
@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: test-container
-    image: intel/opae-nlb-demo:devel
+    image: intel/opae-nlb-demo:0.23.0
     imagePullPolicy: IfNotPresent
     securityContext:
       capabilities:
diff --git a/deployments/dlb_plugin/base/intel-dlb-plugin.yaml b/deployments/dlb_plugin/base/intel-dlb-plugin.yaml
@@ -20,7 +20,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-dlb-plugin:devel
+        image: intel/intel-dlb-plugin:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
diff --git a/deployments/dsa_plugin/base/intel-dsa-plugin.yaml b/deployments/dsa_plugin/base/intel-dsa-plugin.yaml
@@ -20,7 +20,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-dsa-plugin:devel
+        image: intel/intel-dsa-plugin:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
diff --git a/deployments/dsa_plugin/overlays/dsa_initcontainer/dsa_initcontainer.yaml b/deployments/dsa_plugin/overlays/dsa_initcontainer/dsa_initcontainer.yaml
@@ -12,7 +12,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-idxd-config-initcontainer:devel
+        image: intel/intel-idxd-config-initcontainer:0.23.0
         securityContext:
           privileged: true
         volumeMounts:
diff --git a/deployments/fpga_admissionwebhook/manager/manager.yaml b/deployments/fpga_admissionwebhook/manager/manager.yaml
@@ -16,7 +16,7 @@ spec:
         control-plane: controller-manager
     spec:
       containers:
-      - image: intel/intel-fpga-admissionwebhook:devel
+      - image: intel/intel-fpga-admissionwebhook:0.23.0
         imagePullPolicy: IfNotPresent
         name: manager
         securityContext:
diff --git a/deployments/fpga_plugin/base/intel-fpga-plugin-daemonset.yaml b/deployments/fpga_plugin/base/intel-fpga-plugin-daemonset.yaml
@@ -16,7 +16,7 @@ spec:
     spec:
       initContainers:
       - name: intel-fpga-initcontainer
-        image: intel/intel-fpga-initcontainer:devel
+        image: intel/intel-fpga-initcontainer:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
@@ -32,7 +32,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-fpga-plugin:devel
+        image: intel/intel-fpga-plugin:0.23.0
         imagePullPolicy: IfNotPresent
         args:
           - -mode=af
diff --git a/deployments/gpu_plugin/base/intel-gpu-plugin.yaml b/deployments/gpu_plugin/base/intel-gpu-plugin.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       initContainers:
       - name: intel-gpu-initcontainer
-        image: intel/intel-gpu-initcontainer:devel
+        image: intel/intel-gpu-initcontainer:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
@@ -29,7 +29,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-gpu-plugin:devel
+        image: intel/intel-gpu-plugin:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
diff --git a/deployments/operator/manager/manager.yaml b/deployments/operator/manager/manager.yaml
@@ -23,7 +23,7 @@ spec:
         control-plane: controller-manager
     spec:
       containers:
-      - image: intel/intel-deviceplugin-operator:devel
+      - image: intel/intel-deviceplugin-operator:0.23.0
         imagePullPolicy: IfNotPresent
         name: manager
         resources:
diff --git a/deployments/operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml
@@ -9,7 +9,7 @@ metadata:
   # annotations:
   #   container.apparmor.security.beta.kubernetes.io/intel-dlb-plugin: unconfined
 spec:
-  image: intel/intel-dlb-plugin:0.22.0
+  image: intel/intel-dlb-plugin:0.23.0
   logLevel: 4
   nodeSelector:
     feature.node.kubernetes.io/dlb: 'true'
diff --git a/deployments/operator/samples/deviceplugin_v1_dsadeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_dsadeviceplugin.yaml
@@ -3,6 +3,6 @@ kind: DsaDevicePlugin
 metadata:
   name: dsadeviceplugin-sample
 spec:
-  image: intel/intel-dsa-plugin:0.22.0
+  image: intel/intel-dsa-plugin:0.23.0
   sharedDevNum: 10
   logLevel: 4
diff --git a/deployments/operator/samples/deviceplugin_v1_fpgadeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_fpgadeviceplugin.yaml
@@ -3,8 +3,8 @@ kind: FpgaDevicePlugin
 metadata:
   name: fpgadeviceplugin-sample
 spec:
-  image: intel/intel-fpga-plugin:0.22.0
-  initImage: intel/intel-fpga-initcontainer:0.22.0
+  image: intel/intel-fpga-plugin:0.23.0
+  initImage: intel/intel-fpga-initcontainer:0.23.0
   mode: region
   logLevel: 4
   nodeSelector:
diff --git a/deployments/operator/samples/deviceplugin_v1_gpudeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_gpudeviceplugin.yaml
@@ -3,8 +3,8 @@ kind: GpuDevicePlugin
 metadata:
   name: gpudeviceplugin-sample
 spec:
-  image: intel/intel-gpu-plugin:0.22.0
-  initImage: intel/intel-gpu-initcontainer:0.22.0
+  image: intel/intel-gpu-plugin:0.23.0
+  initImage: intel/intel-gpu-initcontainer:0.23.0
   sharedDevNum: 10
   logLevel: 4
   nodeSelector:
diff --git a/deployments/operator/samples/deviceplugin_v1_qatdeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_qatdeviceplugin.yaml
@@ -9,7 +9,7 @@ metadata:
   # annotations:
   #   container.apparmor.security.beta.kubernetes.io/intel-qat-plugin: unconfined
 spec:
-  image: intel/intel-qat-plugin:0.22.0
+  image: intel/intel-qat-plugin:0.23.0
   dpdkDriver: vfio-pci
   kernelVfDrivers:
     - c6xxvf
diff --git a/deployments/operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml
@@ -3,8 +3,8 @@ kind: SgxDevicePlugin
 metadata:
   name: sgxdeviceplugin-sample
 spec:
-  image: intel/intel-sgx-plugin:0.22.0
-  initImage: intel/intel-sgx-initcontainer:0.22.0
+  image: intel/intel-sgx-plugin:0.23.0
+  initImage: intel/intel-sgx-initcontainer:0.23.0
   enclaveLimit: 110
   provisionLimit: 110
   logLevel: 4
diff --git a/deployments/qat_dpdk_app/base/crypto-perf-dpdk-pod-requesting-qat.yaml b/deployments/qat_dpdk_app/base/crypto-perf-dpdk-pod-requesting-qat.yaml
@@ -5,7 +5,7 @@ metadata:
 spec:
   containers:
   - name: crypto-perf
-    image: intel/crypto-perf:devel
+    image: intel/crypto-perf:0.23.0
     imagePullPolicy: IfNotPresent
     command: [ "/bin/bash", "-c", "--" ]
     args: [ "while true; do sleep 300000; done;" ]
diff --git a/deployments/qat_plugin/base/intel-qat-kernel-plugin.yaml b/deployments/qat_plugin/base/intel-qat-kernel-plugin.yaml
@@ -18,7 +18,7 @@ spec:
         securityContext:
           readOnlyRootFilesystem: true
           privileged: true
-        image: intel/intel-qat-plugin:devel
+        image: intel/intel-qat-plugin:0.23.0
         imagePullPolicy: IfNotPresent
         args: ["-mode", "kernel"]
         volumeMounts:
diff --git a/deployments/qat_plugin/base/intel-qat-plugin.yaml b/deployments/qat_plugin/base/intel-qat-plugin.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: intel-qat-plugin
-        image: intel/intel-qat-plugin:devel
+        image: intel/intel-qat-plugin:0.23.0
         securityContext:
           readOnlyRootFilesystem: true
         imagePullPolicy: IfNotPresent
diff --git a/deployments/sgx_admissionwebhook/manager/manager.yaml b/deployments/sgx_admissionwebhook/manager/manager.yaml
@@ -16,7 +16,7 @@ spec:
         control-plane: controller-manager
     spec:
       containers:
-      - image: intel/intel-sgx-admissionwebhook:devel
+      - image: intel/intel-sgx-admissionwebhook:0.23.0
         imagePullPolicy: IfNotPresent
         name: manager
         securityContext:
diff --git a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml
@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
       - name: intel-sgx-plugin
-        image: intel/intel-sgx-plugin:devel
+        image: intel/intel-sgx-plugin:0.23.0
         securityContext:
           readOnlyRootFilesystem: true
         imagePullPolicy: IfNotPresent
diff --git a/deployments/sgx_plugin/overlays/epc-hook-initcontainer/add-epc-nfd-initcontainer.yaml b/deployments/sgx_plugin/overlays/epc-hook-initcontainer/add-epc-nfd-initcontainer.yaml
@@ -7,7 +7,7 @@ spec:
     spec:
       initContainers:
       - name: intel-sgx-initcontainer
-        image: intel/intel-sgx-initcontainer:devel
+        image: intel/intel-sgx-initcontainer:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
diff --git a/deployments/sgx_plugin/overlays/epc-nfd/add-epc-nfd-initcontainer.yaml b/deployments/sgx_plugin/overlays/epc-nfd/add-epc-nfd-initcontainer.yaml
@@ -7,7 +7,7 @@ spec:
     spec:
       initContainers:
       - name: intel-sgx-initcontainer
-        image: intel/intel-sgx-initcontainer:devel
+        image: intel/intel-sgx-initcontainer:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
diff --git a/deployments/sgx_plugin/overlays/epc-register/init-daemonset.yaml b/deployments/sgx_plugin/overlays/epc-register/init-daemonset.yaml
@@ -16,7 +16,7 @@ spec:
       serviceAccountName: sgx-plugin
       containers:
       - name: sgx-node-init
-        image: intel/intel-sgx-initcontainer:devel
+        image: intel/intel-sgx-initcontainer:0.23.0
         imagePullPolicy: IfNotPresent
         command:
           - /usr/local/bin/sgx-sw/intel-sgx-epchook
diff --git a/deployments/vpu_plugin/base/intel-vpu-plugin.yaml b/deployments/vpu_plugin/base/intel-vpu-plugin.yaml
@@ -20,7 +20,7 @@ spec:
             valueFrom:
               fieldRef:
                 fieldPath: spec.nodeName
-        image: intel/intel-vpu-plugin:devel
+        image: intel/intel-vpu-plugin:0.23.0
         imagePullPolicy: IfNotPresent
         securityContext:
           readOnlyRootFilesystem: true
diff --git a/pkg/apis/deviceplugin/v1/webhook_common.go b/pkg/apis/deviceplugin/v1/webhook_common.go
@@ -23,7 +23,7 @@ import (
 )
 
 // common constants for webhooks.
-const imageMinVersion string = "0.22.0"
+const imageMinVersion string = "0.23.0"
 
 // common functions for webhooks
 
diff --git a/pkg/controllers/fpga/controller_test.go b/pkg/controllers/fpga/controller_test.go
@@ -178,7 +178,7 @@ func TestNewDaemonSetFPGA(t *testing.T) {
 
 	plugin := &devicepluginv1.FpgaDevicePlugin{
 		Spec: devicepluginv1.FpgaDevicePluginSpec{
-			InitImage: "intel/intel-fpga-initcontainer:devel",
+			InitImage: "intel/intel-fpga-initcontainer:0.23.0",
 		},
 	}
 
diff --git a/pkg/controllers/gpu/controller_test.go b/pkg/controllers/gpu/controller_test.go
@@ -184,7 +184,7 @@ func TestNewDamonSetGPU(t *testing.T) {
 		}
 
 		if tc.isInitImage {
-			plugin.Spec.InitImage = "intel/intel-gpu-initcontainer:devel"
+			plugin.Spec.InitImage = "intel/intel-gpu-initcontainer:0.23.0"
 		}
 
 		t.Run(tc.name, func(t *testing.T) {
