feat: Add KVM module loader DaemonSet to enable hardware acceleration…

deploy/00crds.yaml

@@ -4404,6 +4404,46 @@ spec:
     app: vpwned-sdk
   type: ClusterIP
 ---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    app: kvm-module-loader
+  name: migration-kvm-module-loader
+  namespace: migration-system
+spec:
+  selector:
+    matchLabels:
+      app: kvm-module-loader
+  template:
+    metadata:
+      labels:
+        app: kvm-module-loader
+    spec:
+      automountServiceAccountToken: false
+      containers:
+      - command:
+        - sh
+        - -c
+        - modprobe kvm-intel || modprobe kvm-amd || true; sleep infinity
+        image: busybox:1.36
+        name: kvm-module-loader
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /lib/modules
+          name: lib-modules
+          readOnly: true
+      tolerations:
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/control-plane
+        operator: Exists
+      volumes:
+      - hostPath:
+          path: /lib/modules
+          type: Directory
+        name: lib-modules
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:

deploy/installer.yaml

@@ -4568,6 +4568,46 @@ spec:
           type: DirectoryOrCreate
         name: vddk-storage
 ---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    app: kvm-module-loader
+  name: migration-kvm-module-loader
+  namespace: migration-system
+spec:
+  selector:
+    matchLabels:
+      app: kvm-module-loader
+  template:
+    metadata:
+      labels:
+        app: kvm-module-loader
+    spec:
+      automountServiceAccountToken: false
+      containers:
+      - command:
+        - sh
+        - -c
+        - modprobe kvm-intel || modprobe kvm-amd || true; sleep infinity
+        image: busybox:1.36
+        name: kvm-module-loader
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /lib/modules
+          name: lib-modules
+          readOnly: true
+      tolerations:
+      - effect: NoSchedule
+        key: node-role.kubernetes.io/control-plane
+        operator: Exists
+      volumes:
+      - hostPath:
+          path: /lib/modules
+          type: Directory
+        name: lib-modules
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:

k8s/migration/config/addons/kustomization.yaml

@@ -1,5 +1,6 @@
 resources:
 - k8s.svc.yaml
+- kvm-module-loader-daemonset.yaml
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 images:

k8s/migration/config/addons/kvm-module-loader-daemonset.yaml

@@ -0,0 +1,45 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: kvm-module-loader
+  namespace: migration-system
+  labels:
+    app: kvm-module-loader
+spec:
+  selector:
+    matchLabels:
+      app: kvm-module-loader
+  template:
+    metadata:
+      labels:
+        app: kvm-module-loader
+    spec:
+      automountServiceAccountToken: false
+      # No nodeSelector: the DaemonSet runs on every node in the cluster.
+      # This is intentional — when a new migration agent node joins, Kubernetes
+      # automatically schedules this pod on it before any v2v-helper job can
+      # land there, ensuring KVM is loaded regardless of when nodes are added.
+      # modprobe is a no-op if the module is already loaded or the CPU vendor
+      # does not support KVM, so running on non-migration nodes is harmless.
+      tolerations:
+      - key: node-role.kubernetes.io/control-plane
+        operator: Exists
+        effect: NoSchedule
+      containers:
+      - name: kvm-module-loader
+        image: busybox:1.36
+        command:
+        - sh
+        - -c
+        - modprobe kvm-intel || modprobe kvm-amd || true; sleep infinity
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - name: lib-modules
+          mountPath: /lib/modules
+          readOnly: true
+      volumes:
+      - name: lib-modules
+        hostPath:
+          path: /lib/modules
+          type: Directory