From 38e3afb2a68bb7aa07fe7523e8761fbe60b0d3d5 Mon Sep 17 00:00:00 2001 From: Mikko Ylinen Date: Mon, 17 Nov 2025 09:15:55 +0200 Subject: [PATCH 01/11] qat: handle service parsing via debugfs The QAT out-of-tree driver does not provide sysfs based cfg_services interface to read (and write) services configurations so QAT debugfs is used as the fallback. bad65eb16f changed how the services string is parsed and trimmed but missed the debugfs path. Because of this, the resource registration errors due so invalid resource names (e.g., "sym;dc", which should be "sym-dc"). Fix by handling the debugfs path the same way as the cfg_services sysfs path. Signed-off-by: Mikko Ylinen --- cmd/qat_plugin/dpdkdrv/dpdkdrv.go | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/cmd/qat_plugin/dpdkdrv/dpdkdrv.go b/cmd/qat_plugin/dpdkdrv/dpdkdrv.go index a482e244e..6956cd0e4 100644 --- a/cmd/qat_plugin/dpdkdrv/dpdkdrv.go +++ b/cmd/qat_plugin/dpdkdrv/dpdkdrv.go @@ -338,6 +338,11 @@ func (dp *DevicePlugin) getDpdkMounts(dpdkDeviceName string) []pluginapi.Mount { } } +// Trim services reported by the kernel into k8s resource names. +func trimServiceName(serviceName string) string { + return strings.Replace(strings.TrimSpace(serviceName), ";", "-", 2) +} + func readDeviceConfiguration(pfDev string) string { qatState, err := os.ReadFile(filepath.Join(pfDev, "qat/state")) if err != nil && !errors.Is(err, os.ErrNotExist) { @@ -353,7 +358,7 @@ func readDeviceConfiguration(pfDev string) string { } if err2 == nil && len(qatCfgServices) != 0 { - return strings.Join(strings.SplitN(strings.TrimSpace(string(qatCfgServices)), ";", 3), "-") + return trimServiceName(string(qatCfgServices)) } } @@ -370,7 +375,7 @@ func readDeviceConfiguration(pfDev string) string { return defaultCapabilities } - return devCfg.Section("GENERAL").Key("ServicesEnabled").String() + return trimServiceName(devCfg.Section("GENERAL").Key("ServicesEnabled").String()) } func getDeviceHealthiness(device string, lookup map[string]string) string { From d78ef29e406b3a6ec6f92b2003a2159318468aa3 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Tue, 14 Oct 2025 11:10:12 +0300 Subject: [PATCH 02/11] gpu: levelzero: use correct struct for temp printing And remove the temperature values from health Signed-off-by: Tuomas Katila --- cmd/gpu_plugin/gpu_plugin.go | 7 ++++--- cmd/gpu_plugin/levelzeroservice/levelzero_service.go | 9 +++------ 2 files changed, 7 insertions(+), 9 deletions(-) diff --git a/cmd/gpu_plugin/gpu_plugin.go b/cmd/gpu_plugin/gpu_plugin.go index 9a756f3a4..619fde38b 100644 --- a/cmd/gpu_plugin/gpu_plugin.go +++ b/cmd/gpu_plugin/gpu_plugin.go @@ -396,7 +396,7 @@ func (dp *devicePlugin) healthStatusForCard(cardPath string) string { return health } - dt, err := dp.levelzeroService.GetDeviceTemperature(bdfAddr) + deviceTemps, err := dp.levelzeroService.GetDeviceTemperature(bdfAddr) // In case of any errors, return the current health status if err != nil { klog.Warningf("Device temperature retrieval failed: %v", err) @@ -407,9 +407,10 @@ func (dp *devicePlugin) healthStatusForCard(cardPath string) string { limit := float64(dp.options.temperatureLimit) // Temperatures for different areas - klog.V(4).Infof("Temperatures: Memory=%.1fC, GPU=%.1fC, Global=%.1fC", dh.MemoryTemperature, dh.GPUTemperature, dh.GlobalTemperature) + klog.V(4).Infof("Temperatures: Memory=%.1fC, GPU=%.1fC, Global=%.1fC", + deviceTemps.Memory, deviceTemps.GPU, deviceTemps.Global) - if dt.GPU > limit || dt.Global > limit || dt.Memory > limit { + if deviceTemps.GPU > limit || deviceTemps.Global > limit || deviceTemps.Memory > limit { health = pluginapi.Unhealthy } diff --git a/cmd/gpu_plugin/levelzeroservice/levelzero_service.go b/cmd/gpu_plugin/levelzeroservice/levelzero_service.go index ddcae25b5..79ca4a3f9 100644 --- a/cmd/gpu_plugin/levelzeroservice/levelzero_service.go +++ b/cmd/gpu_plugin/levelzeroservice/levelzero_service.go @@ -33,12 +33,9 @@ type LevelzeroService interface { } type DeviceHealth struct { - Memory bool - Bus bool - SoC bool - GlobalTemperature float64 - GPUTemperature float64 - MemoryTemperature float64 + Memory bool + Bus bool + SoC bool } type DeviceTemperature struct { From 108d2493460dbd9990efbf39f864e7c2d36fdb98 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Tue, 18 Nov 2025 11:57:52 +0200 Subject: [PATCH 03/11] gpu: remove unused variables Signed-off-by: Tuomas Katila --- cmd/gpu_plugin/gpu_plugin.go | 2 -- 1 file changed, 2 deletions(-) diff --git a/cmd/gpu_plugin/gpu_plugin.go b/cmd/gpu_plugin/gpu_plugin.go index 619fde38b..42caec066 100644 --- a/cmd/gpu_plugin/gpu_plugin.go +++ b/cmd/gpu_plugin/gpu_plugin.go @@ -43,8 +43,6 @@ const ( devfsDriDirectory = "/dev/dri" wslDxgPath = "/dev/dxg" wslLibPath = "/usr/lib/wsl" - nfdFeatureDir = "/etc/kubernetes/node-feature-discovery/features.d" - resourceFilename = "intel-gpu-resources.txt" gpuDeviceRE = `^card[0-9]+$` controlDeviceRE = `^controlD[0-9]+$` pciAddressRE = "^[0-9a-f]{4}:[0-9a-f]{2}:[0-9a-f]{2}\\.[0-9a-f]{1}$" From 278d663581c8fb864c2f2d6ab295f79fcb7f8911 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Tue, 18 Nov 2025 11:59:32 +0200 Subject: [PATCH 04/11] gpu: add support for additional temperature limits Use the existing "temp-limit" as the global limit, and introduce GPU and memory thresholds. Signed-off-by: Tuomas Katila --- cmd/gpu_plugin/gpu_plugin.go | 16 ++++++---- cmd/gpu_plugin/gpu_plugin_test.go | 29 +++++++++++++++---- .../levelzeroservice/levelzero_service.go | 12 ++++---- 3 files changed, 40 insertions(+), 17 deletions(-) diff --git a/cmd/gpu_plugin/gpu_plugin.go b/cmd/gpu_plugin/gpu_plugin.go index 42caec066..0c572975e 100644 --- a/cmd/gpu_plugin/gpu_plugin.go +++ b/cmd/gpu_plugin/gpu_plugin.go @@ -70,7 +70,9 @@ type cliOptions struct { allowIDs string denyIDs string sharedDevNum int - temperatureLimit int + globalTempLimit int + memoryTempLimit int + gpuTempLimit int enableMonitoring bool wslScan bool healthManagement bool @@ -402,13 +404,13 @@ func (dp *devicePlugin) healthStatusForCard(cardPath string) string { return health } - limit := float64(dp.options.temperatureLimit) - // Temperatures for different areas - klog.V(4).Infof("Temperatures: Memory=%.1fC, GPU=%.1fC, Global=%.1fC", + klog.V(4).Infof("Temperatures: Memory=%dC, GPU=%dC, Global=%dC", deviceTemps.Memory, deviceTemps.GPU, deviceTemps.Global) - if deviceTemps.GPU > limit || deviceTemps.Global > limit || deviceTemps.Memory > limit { + if deviceTemps.GPU > dp.options.gpuTempLimit || + deviceTemps.Global > dp.options.globalTempLimit || + deviceTemps.Memory > dp.options.memoryTempLimit { health = pluginapi.Unhealthy } @@ -784,7 +786,9 @@ func main() { flag.BoolVar(&opts.healthManagement, "health-management", false, "enable GPU health management") flag.BoolVar(&opts.wslScan, "wsl", false, "scan for / use WSL devices") flag.IntVar(&opts.sharedDevNum, "shared-dev-num", 1, "number of containers sharing the same GPU device") - flag.IntVar(&opts.temperatureLimit, "temp-limit", 100, "temperature limit at which device is marked unhealthy") + flag.IntVar(&opts.globalTempLimit, "temp-limit", 100, "Global temperature limit at which device is marked unhealthy") + flag.IntVar(&opts.gpuTempLimit, "gpu-temp-limit", 100, "GPU temperature limit at which device is marked unhealthy") + flag.IntVar(&opts.memoryTempLimit, "memory-temp-limit", 100, "Memory temperature limit at which device is marked unhealthy") flag.StringVar(&opts.preferredAllocationPolicy, "allocation-policy", "none", "modes of allocating GPU devices: balanced, packed and none") flag.StringVar(&opts.allowIDs, "allow-ids", "", "comma-separated list of device IDs to allow (e.g. 0x49c5,0x49c6)") flag.StringVar(&opts.denyIDs, "deny-ids", "", "comma-separated list of device IDs to deny (e.g. 0x49c5,0x49c6)") diff --git a/cmd/gpu_plugin/gpu_plugin_test.go b/cmd/gpu_plugin/gpu_plugin_test.go index beb9f7262..86fd48e65 100644 --- a/cmd/gpu_plugin/gpu_plugin_test.go +++ b/cmd/gpu_plugin/gpu_plugin_test.go @@ -58,10 +58,11 @@ func (n *mockNotifier) Notify(newDeviceTree dpapi.DeviceTree) { } type mockL0Service struct { - indices []uint32 - memSize uint64 - healthy bool - fail bool + indices []uint32 + memSize uint64 + healthy bool + failTemp bool + fail bool } func (m *mockL0Service) Run(keep bool) { @@ -83,7 +84,7 @@ func (m *mockL0Service) GetDeviceHealth(bdfAddress string) (levelzeroservice.Dev return levelzeroservice.DeviceHealth{Memory: m.healthy, Bus: m.healthy, SoC: m.healthy}, nil } func (m *mockL0Service) GetDeviceTemperature(bdfAddress string) (levelzeroservice.DeviceTemperature, error) { - if m.fail { + if m.fail || m.failTemp { return levelzeroservice.DeviceTemperature{}, errors.Errorf("error, error") } @@ -608,6 +609,24 @@ func TestScanWithHealth(t *testing.T) { healthy: true, }, }, + { + name: "one device with failure on temp reading", + pciAddresses: map[string]string{"0000:00:00.0": "card0"}, + sysfsdirs: []string{"card0/device/drm/card0", "card0/device/drm/controlD64"}, + sysfsfiles: map[string][]byte{ + "card0/device/vendor": []byte("0x8086"), + }, + devfsdirs: []string{ + "card0", + "by-path/pci-0000:00:00.0-card", + "by-path/pci-0000:00:00.0-render", + }, + expectedI915Devs: 1, + l0mock: &mockL0Service{ + healthy: true, + failTemp: true, + }, + }, { name: "one unhealthy device with proper symlink", pciAddresses: map[string]string{"0000:00:00.0": "card0"}, diff --git a/cmd/gpu_plugin/levelzeroservice/levelzero_service.go b/cmd/gpu_plugin/levelzeroservice/levelzero_service.go index 79ca4a3f9..774face02 100644 --- a/cmd/gpu_plugin/levelzeroservice/levelzero_service.go +++ b/cmd/gpu_plugin/levelzeroservice/levelzero_service.go @@ -39,9 +39,9 @@ type DeviceHealth struct { } type DeviceTemperature struct { - Global float64 - GPU float64 - Memory float64 + Global int + GPU int + Memory int } type clientNotReadyErr struct{} @@ -175,9 +175,9 @@ func (l *levelzero) GetDeviceTemperature(bdfAddress string) (DeviceTemperature, } return DeviceTemperature{ - Global: temps.Global, - GPU: temps.Gpu, - Memory: temps.Memory, + Global: int(temps.Global), + GPU: int(temps.Gpu), + Memory: int(temps.Memory), }, nil } From c94466272f24057e97b2c081a297bcd1e370b11b Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Wed, 19 Nov 2025 12:14:09 +0200 Subject: [PATCH 05/11] gpu: levelzero: update compute-runtime components Fix uninitialized variable that caused random behaviour. Signed-off-by: Tuomas Katila --- build/docker/intel-gpu-levelzero.Dockerfile | 14 +++++++------- .../templates/intel-gpu-levelzero.Dockerfile.in | 14 +++++++------- cmd/gpu_levelzero/zes.c | 15 +++++++++++---- 3 files changed, 25 insertions(+), 18 deletions(-) diff --git a/build/docker/intel-gpu-levelzero.Dockerfile b/build/docker/intel-gpu-levelzero.Dockerfile index a5b8c0af9..40d192dde 100644 --- a/build/docker/intel-gpu-levelzero.Dockerfile +++ b/build/docker/intel-gpu-levelzero.Dockerfile @@ -44,13 +44,13 @@ RUN if [ $ROCKYLINUX -eq 0 ]; then \ LATEST_GO=$(curl --no-progress-meter https://go.dev/dl/?mode=json | jq ".[] | select(.version | startswith(\"go${CGO_VERSION}\")).version" | tr -d "\"") && \ wget -q https://go.dev/dl/$LATEST_GO.linux-amd64.tar.gz -O - | tar -xz -C /usr/local && \ cd /runtime && \ - wget -q https://github.com/intel/compute-runtime/releases/download/25.09.32961.7/intel-level-zero-gpu_1.6.32961.7_amd64.deb && \ - wget -q https://github.com/intel/compute-runtime/releases/download/25.09.32961.7/intel-opencl-icd_25.09.32961.7_amd64.deb && \ - wget -q https://github.com/intel/compute-runtime/releases/download/25.09.32961.7/libigdgmm12_22.6.0_amd64.deb && \ - wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.20.2/level-zero-devel_1.20.2+u22.04_amd64.deb && \ - wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.20.2/level-zero_1.20.2+u22.04_amd64.deb && \ - wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.8.3/intel-igc-core-2_2.8.3+18762_amd64.deb && \ - wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.8.3/intel-igc-opencl-2_2.8.3+18762_amd64.deb && \ + wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-core-2_2.20.3+19972_amd64.deb && \ + wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-opencl-2_2.20.3+19972_amd64.deb && \ + wget -q https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/intel-opencl-icd_25.40.35563.4-0_amd64.deb && \ + wget -q https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libigdgmm12_22.8.2_amd64.deb && \ + wget -q https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libze-intel-gpu1_25.40.35563.4-0_amd64.deb && \ + wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero_1.24.3+u22.04_amd64.deb && \ + wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero-devel_1.24.3+u22.04_amd64.deb && \ dpkg -i *.deb && \ rm -rf /var/lib/apt/lists/\*; \ else \ diff --git a/build/docker/templates/intel-gpu-levelzero.Dockerfile.in b/build/docker/templates/intel-gpu-levelzero.Dockerfile.in index d109c619c..fd77fa8fa 100644 --- a/build/docker/templates/intel-gpu-levelzero.Dockerfile.in +++ b/build/docker/templates/intel-gpu-levelzero.Dockerfile.in @@ -37,13 +37,13 @@ RUN if [ $ROCKYLINUX -eq 0 ]; then \N LATEST_GO=$(curl --no-progress-meter https://go.dev/dl/?mode=json | jq ".[] | select(.version | startswith(\"go${CGO_VERSION}\")).version" | tr -d "\"") && \N wget -q https://go.dev/dl/$LATEST_GO.linux-amd64.tar.gz -O - | tar -xz -C /usr/local && \N cd /runtime && \N - wget -q https://github.com/intel/compute-runtime/releases/download/25.09.32961.7/intel-level-zero-gpu_1.6.32961.7_amd64.deb && \N - wget -q https://github.com/intel/compute-runtime/releases/download/25.09.32961.7/intel-opencl-icd_25.09.32961.7_amd64.deb && \N - wget -q https://github.com/intel/compute-runtime/releases/download/25.09.32961.7/libigdgmm12_22.6.0_amd64.deb && \N - wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.20.2/level-zero-devel_1.20.2+u22.04_amd64.deb && \N - wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.20.2/level-zero_1.20.2+u22.04_amd64.deb && \N - wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.8.3/intel-igc-core-2_2.8.3+18762_amd64.deb && \N - wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.8.3/intel-igc-opencl-2_2.8.3+18762_amd64.deb && \N + wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-core-2_2.20.3+19972_amd64.deb && \N + wget -q https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-opencl-2_2.20.3+19972_amd64.deb && \N + wget -q https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/intel-opencl-icd_25.40.35563.4-0_amd64.deb && \N + wget -q https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libigdgmm12_22.8.2_amd64.deb && \N + wget -q https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libze-intel-gpu1_25.40.35563.4-0_amd64.deb && \N + wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero_1.24.3+u22.04_amd64.deb && \N + wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero-devel_1.24.3+u22.04_amd64.deb && \N dpkg -i *.deb && \N rm -rf /var/lib/apt/lists/\*; \N else \N diff --git a/cmd/gpu_levelzero/zes.c b/cmd/gpu_levelzero/zes.c index a4593deb8..5243e0321 100644 --- a/cmd/gpu_levelzero/zes.c +++ b/cmd/gpu_levelzero/zes.c @@ -137,8 +137,12 @@ static ze_result_t enumerate_zes_devices(void) for (uint32_t i = 0; i < count; ++i) { zes_device_handle_t dev_h = zes_handles[i]; - zes_pci_properties_t pci_props; + zes_pci_properties_t pci_props = { + .pNext = NULL, + }; + if (zesDevicePciGetProperties(dev_h, &pci_props) != ZE_RESULT_SUCCESS) { + print_log(LOG_WARNING, "Failed to get PCI properties for device %d: %X\n", i, res); continue; } @@ -332,8 +336,9 @@ bool zes_device_bus_is_healthy(char* bdf_address, uint32_t* error) return true; } - zes_pci_state_t pci_state; - memset(&pci_state, 0, sizeof(pci_state)); + zes_pci_state_t pci_state = { + .pNext = NULL, + }; ze_result_t res = zesDevicePciGetState(handle, &pci_state); if (res == ZE_RESULT_SUCCESS) { @@ -409,7 +414,9 @@ double zes_device_temp_max(char* bdf_address, char* sensor, uint32_t* error) } for (uint32_t i = 0; i < count; ++i) { - zes_temp_properties_t props; + zes_temp_properties_t props = { + .pNext = NULL, + }; res = zesTemperatureGetProperties(tempHandles[i], &props); if (res != ZE_RESULT_SUCCESS) { From ae025351bfc5d66f212c527251dc5eaaf1e1d489 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Wed, 19 Nov 2025 12:36:15 +0200 Subject: [PATCH 06/11] build: levelzero: re-download compute-runtime and others By re-downloading the components, we save on the overall container size. While the build time increases slightly, the container size drops by around 100M (520->420). Signed-off-by: Tuomas Katila --- build/docker/intel-gpu-levelzero.Dockerfile | 17 ++++++++++++++--- .../templates/intel-gpu-levelzero.Dockerfile.in | 17 ++++++++++++++--- 2 files changed, 28 insertions(+), 6 deletions(-) diff --git a/build/docker/intel-gpu-levelzero.Dockerfile b/build/docker/intel-gpu-levelzero.Dockerfile index 40d192dde..78eb34c10 100644 --- a/build/docker/intel-gpu-levelzero.Dockerfile +++ b/build/docker/intel-gpu-levelzero.Dockerfile @@ -52,6 +52,7 @@ RUN if [ $ROCKYLINUX -eq 0 ]; then \ wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero_1.24.3+u22.04_amd64.deb && \ wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero-devel_1.24.3+u22.04_amd64.deb && \ dpkg -i *.deb && \ + rm -f *.deb && \ rm -rf /var/lib/apt/lists/\*; \ else \ source /etc/os-release && dnf install -y gcc jq wget 'dnf-command(config-manager)' && \ @@ -83,9 +84,19 @@ ARG CMD ARG ROCKYLINUX COPY --from=builder /runtime /runtime RUN if [ $ROCKYLINUX -eq 0 ]; then \ - apt-get update && apt-get install --no-install-recommends -y ocl-icd-libopencl1 && \ - rm /runtime/level-zero-devel_*.deb && \ - cd /runtime && dpkg -i *.deb && rm -rf /runtime && \ + apt-get update && apt-get install --no-install-recommends -y ocl-icd-libopencl1 wget ca-certificates && \ + cd /runtime && \ + wget https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-core-2_2.20.3+19972_amd64.deb && \ + wget https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-opencl-2_2.20.3+19972_amd64.deb && \ + wget https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/intel-opencl-icd_25.40.35563.4-0_amd64.deb && \ + wget https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libigdgmm12_22.8.2_amd64.deb && \ + wget https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libze-intel-gpu1_25.40.35563.4-0_amd64.deb && \ + wget https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero_1.24.3+u22.04_amd64.deb && \ + dpkg -i *.deb && \ + apt-get -y remove wget ca-certificates && \ + apt-get -y autoremove && \ + rm -f *.deb && \ + rm -rf /var/lib/apt/lists/\* && \ rm "/lib/x86_64-linux-gnu/libze_validation"* && rm "/lib/x86_64-linux-gnu/libze_tracing_layer"*; \ else \ cp -a /runtime//*.so* /usr/lib64/ && cp -a /runtime/OpenCL /etc/ && cp -a /runtime/licenses/* /usr/share/licenses/; \ diff --git a/build/docker/templates/intel-gpu-levelzero.Dockerfile.in b/build/docker/templates/intel-gpu-levelzero.Dockerfile.in index fd77fa8fa..c72ee067b 100644 --- a/build/docker/templates/intel-gpu-levelzero.Dockerfile.in +++ b/build/docker/templates/intel-gpu-levelzero.Dockerfile.in @@ -45,6 +45,7 @@ RUN if [ $ROCKYLINUX -eq 0 ]; then \N wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero_1.24.3+u22.04_amd64.deb && \N wget -q https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero-devel_1.24.3+u22.04_amd64.deb && \N dpkg -i *.deb && \N + rm -f *.deb && \N rm -rf /var/lib/apt/lists/\*; \N else \N source /etc/os-release && dnf install -y gcc jq wget 'dnf-command(config-manager)' && \N @@ -80,9 +81,19 @@ ARG ROCKYLINUX COPY --from=builder /runtime /runtime RUN if [ $ROCKYLINUX -eq 0 ]; then \N - apt-get update && apt-get install --no-install-recommends -y ocl-icd-libopencl1 && \N - rm /runtime/level-zero-devel_*.deb && \N - cd /runtime && dpkg -i *.deb && rm -rf /runtime && \N + apt-get update && apt-get install --no-install-recommends -y ocl-icd-libopencl1 wget ca-certificates && \N + cd /runtime && \N + wget https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-core-2_2.20.3+19972_amd64.deb && \N + wget https://github.com/intel/intel-graphics-compiler/releases/download/v2.20.3/intel-igc-opencl-2_2.20.3+19972_amd64.deb && \N + wget https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/intel-opencl-icd_25.40.35563.4-0_amd64.deb && \N + wget https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libigdgmm12_22.8.2_amd64.deb && \N + wget https://github.com/intel/compute-runtime/releases/download/25.40.35563.4/libze-intel-gpu1_25.40.35563.4-0_amd64.deb && \N + wget https://github.com/oneapi-src/level-zero/releases/download/v1.24.3/level-zero_1.24.3+u22.04_amd64.deb && \N + dpkg -i *.deb && \N + apt-get -y remove wget ca-certificates && \N + apt-get -y autoremove && \N + rm -f *.deb && \N + rm -rf /var/lib/apt/lists/\* && \N rm "/lib/x86_64-linux-gnu/libze_validation"* && rm "/lib/x86_64-linux-gnu/libze_tracing_layer"*; \N else \N cp -a /runtime//*.so* /usr/lib64/ && cp -a /runtime/OpenCL /etc/ && cp -a /runtime/licenses/* /usr/share/licenses/; \N From b451e1e6ae5ef6c7edb645920db227c7d3cb9428 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Fri, 28 Nov 2025 08:41:18 +0200 Subject: [PATCH 07/11] gpu plugin: add by-path mount options default behaviour stays the same. Signed-off-by: Tuomas Katila --- cmd/gpu_plugin/README.md | 21 +++++++ cmd/gpu_plugin/gpu_plugin.go | 32 ++++++++++- cmd/gpu_plugin/gpu_plugin_test.go | 92 +++++++++++++++++++++++++++++++ 3 files changed, 143 insertions(+), 2 deletions(-) diff --git a/cmd/gpu_plugin/README.md b/cmd/gpu_plugin/README.md index d68308019..ebb3bc74c 100644 --- a/cmd/gpu_plugin/README.md +++ b/cmd/gpu_plugin/README.md @@ -19,6 +19,7 @@ Table of Contents * [CDI support](#cdi-support) * [KMD and UMD](#kmd-and-umd) * [Health management](#health-management) + * [by-path mounting](#by-path-mounting) * [Issues with media workloads on multi-GPU setups](#issues-with-media-workloads-on-multi-gpu-setups) * [Workaround for QSV and VA-API](#workaround-for-qsv-and-va-api) @@ -60,6 +61,7 @@ For workloads on different KMDs, see [KMD and UMD](#kmd-and-umd). | -allow-ids | string | "" | A list of PCI Device IDs that are allowed to be registered as resources. Default is empty (=all registered). Cannot be used together with `deny-ids`. | | -deny-ids | string | "" | A list of PCI Device IDs that are denied to be registered as resources. Default is empty (=all registered). Cannot be used together with `allow-ids`. | | -allocation-policy | string | none | 3 possible values: balanced, packed, none. For shared-dev-num > 1: _balanced_ mode spreads workloads among GPU devices, _packed_ mode fills one GPU fully before moving to next, and _none_ selects first available device from kubelet. Default is _none_. | +| -bypath | string | single | 3 possible values: single, none, all. Default is single. Changes how the by-path symlinks are handled by the plugin. More [info](#by-path-mounting). | The plugin also accepts a number of other arguments (common to all plugins) related to logging. Please use the -h option to see the complete list of logging related options. @@ -258,6 +260,25 @@ Kubernetes Device Plugin API allows passing device's healthiness to Kubelet. By Temperature limit can be provided via the command line argument, default is 100C. +### By-path mounting + +The DRM devices for the Intel GPUs register `by-path` symlinks under `/dev/dri/by-path`. For each GPU character device, there is a corresponding symlink in the by-path directory: +``` +$ ls -l /dev/dri/by-path/ +lrwxrwxrwx 1 root root 8 oct x 13:09 pci-0000:00:02.0-card -> ../card1 +lrwxrwxrwx 1 root root 13 oct x 13:09 pci-0000:00:02.0-render -> ../renderD128 +``` + +The Intel GPU UMD uses these symlinks to detect hardware properties in some cases. Mounting the by-path symlinks as __symlinks__ with the Device plugin API (DP API) is not possible. When the symlinks are mounted via the DP API, they are mounted as the actual devices, and the symlink information is lost (pci address). + +To support possible all use cases, GPU plugin allows changing the by-path mounting method. The options are: +* `single` - Symlinks are individually mounted per device. Default. + * Mostly Works, but is known to have issues with some pytorch workloads. See [issue](https://github.com/intel/intel-device-plugins-for-kubernetes/issues/2158). +* `none` - No symlinks are mounted. + * Aligned with docker use where devices are included with privileged mode. +* `all` - All symlinks are mounted even if only one is allocated by the container. + * Optimal for scale-up workloads where all the GPUs are used by the workload. + ### Issues with media workloads on multi-GPU setups OneVPL media API, 3D and compute APIs provide device discovery diff --git a/cmd/gpu_plugin/gpu_plugin.go b/cmd/gpu_plugin/gpu_plugin.go index 0c572975e..8c494fb08 100644 --- a/cmd/gpu_plugin/gpu_plugin.go +++ b/cmd/gpu_plugin/gpu_plugin.go @@ -59,6 +59,10 @@ const ( monitorSuffix = "_monitoring" monitorID = "all" + bypathOptionNone = "none" + bypathOptionAll = "all" + bypathOptionSingle = "single" + levelzeroAffinityMaskEnvVar = "ZE_AFFINITY_MASK" // Period of device scans. @@ -69,6 +73,7 @@ type cliOptions struct { preferredAllocationPolicy string allowIDs string denyIDs string + bypathMount string sharedDevNum int globalTempLimit int memoryTempLimit int @@ -289,6 +294,16 @@ func (dp *devicePlugin) bypathMountsForPci(pciAddress, bypathDir string) []plugi return mounts } +func (dp *devicePlugin) bypathMountForAll() []pluginapi.Mount { + return []pluginapi.Mount{ + { + ContainerPath: dp.bypathDir, + HostPath: dp.bypathDir, + ReadOnly: true, + }, + } +} + type devicePlugin struct { gpuDeviceReg *regexp.Regexp controlDeviceReg *regexp.Regexp @@ -660,8 +675,20 @@ func (dp *devicePlugin) createMountsAndCDIDevices(cardPath, name string, devSpec mounts := []pluginapi.Mount{} if dp.bypathFound { - if pciAddr, pciErr := dp.pciAddressForCard(cardPath, name); pciErr == nil { - mounts = dp.bypathMountsForPci(pciAddr, dp.bypathDir) + switch dp.options.bypathMount { + case bypathOptionAll: + klog.V(4).Info("Using by-path mount option: all") + mounts = dp.bypathMountForAll() + case bypathOptionNone: + klog.V(4).Info("Using by-path mount option: none") + // no mounts + case bypathOptionSingle: + fallthrough + default: + klog.V(4).Info("Using by-path mount option: single/default") + if pciAddr, pciErr := dp.pciAddressForCard(cardPath, name); pciErr == nil { + mounts = dp.bypathMountsForPci(pciAddr, dp.bypathDir) + } } } @@ -784,6 +811,7 @@ func main() { flag.StringVar(&prefix, "prefix", "", "Prefix for devfs & sysfs paths") flag.BoolVar(&opts.enableMonitoring, "enable-monitoring", false, "whether to enable '*_monitoring' (= all GPUs) resource") flag.BoolVar(&opts.healthManagement, "health-management", false, "enable GPU health management") + flag.StringVar(&opts.bypathMount, "bypath", bypathOptionSingle, "bypath mounting options: single, none, all. Default: single") flag.BoolVar(&opts.wslScan, "wsl", false, "scan for / use WSL devices") flag.IntVar(&opts.sharedDevNum, "shared-dev-num", 1, "number of containers sharing the same GPU device") flag.IntVar(&opts.globalTempLimit, "temp-limit", 100, "Global temperature limit at which device is marked unhealthy") diff --git a/cmd/gpu_plugin/gpu_plugin_test.go b/cmd/gpu_plugin/gpu_plugin_test.go index 86fd48e65..3a3837f31 100644 --- a/cmd/gpu_plugin/gpu_plugin_test.go +++ b/cmd/gpu_plugin/gpu_plugin_test.go @@ -21,6 +21,7 @@ import ( "path/filepath" "reflect" "sort" + "strings" "testing" "github.com/pkg/errors" @@ -1155,6 +1156,97 @@ func TestCDIDeviceInclusion(t *testing.T) { } } +func TestByPathOptions(t *testing.T) { + root, err := os.MkdirTemp("", "test_bypathoptions") + if err != nil { + t.Fatalf("Can't create temporary directory: %+v", err) + } + // dirs/files need to be removed for the next test + defer os.RemoveAll(root) + + sysfs := path.Join(root, "sys") + devfs := path.Join(root, "dev") + + sysfslinks := []symlinkItem{ + {"/0042:01:02.0", "/class/drm/card0"}, + {"/0042:01:05.0", "/class/drm/card1"}, + {"driver/i915", "/class/drm/card0/device/driver"}, + {"driver/xe", "/class/drm/card1/device/driver"}, + } + + devfslinks := []symlinkItem{ + {"/dri/card0", "/dri/by-path/pci-0042:01:02.0-card"}, + {"/dri/renderD128", "/dri/by-path/pci-0042:01:02.0-render"}, + {"/dri/card1", "/dri/by-path/pci-0042:01:05.0-card"}, + {"/dri/renderD129", "/dri/by-path/pci-0042:01:05.0-render"}, + } + + sysfsDirs := []string{ + "class/drm/card0/device/drm/card0", + "class/drm/card0/device/drm/renderD128", + "class/drm/card1/device/drm/card1", + "class/drm/card1/device/drm/renderD129", + } + + sysfsFiles := map[string][]byte{ + "class/drm/card0/device/device": []byte("0x9a49"), + "class/drm/card0/device/vendor": []byte("0x8086"), + "class/drm/card1/device/device": []byte("0x9a48"), + "class/drm/card1/device/vendor": []byte("0x8086"), + } + + devfsfiles := map[string][]byte{ + "/dri/card0": []byte("1"), + "/dri/renderD128": []byte("1"), + "/dri/card1": []byte("1"), + "/dri/renderD129": []byte("1"), + } + + createSymlinks(t, sysfs, sysfslinks) + createFiles(t, devfs, devfsfiles) + createFiles(t, sysfs, sysfsFiles) + createDirs(t, sysfs, sysfsDirs) + createSymlinks(t, devfs, devfslinks) + + plugin := newDevicePlugin(sysfs+"/class/drm", devfs+"/dri", cliOptions{sharedDevNum: 1, bypathMount: bypathOptionAll}) + plugin.bypathFound = true + + devSpecs := []v1beta1.DeviceSpec{} + + sysfsPath := filepath.Join(sysfs, "class", "drm", "card0") + + mounts, _ := plugin.createMountsAndCDIDevices(sysfsPath, "card0", devSpecs) + + if len(mounts) != 1 { + t.Error("Invalid count for mounts for by-path option 'all'") + } + if !strings.HasSuffix(mounts[0].ContainerPath, "/by-path") { + t.Error("Invalid container path mount for by-path option 'all'") + } + + plugin.options.bypathMount = bypathOptionNone + + mounts, _ = plugin.createMountsAndCDIDevices(sysfsPath, "card0", devSpecs) + + if len(mounts) != 0 { + t.Error("Invalid count for mounts for by-path option 'none'") + } + + plugin.options.bypathMount = bypathOptionSingle + + mounts, _ = plugin.createMountsAndCDIDevices(sysfsPath, "card0", devSpecs) + + if len(mounts) != 2 { + t.Error("Invalid count for mounts for by-path option 'single'") + } + if !strings.HasSuffix(mounts[0].ContainerPath, "by-path/pci-0042:01:02.0-card") { + t.Error("Invalid container path mount for by-path option 'single'") + } + if !strings.HasSuffix(mounts[1].ContainerPath, "by-path/pci-0042:01:02.0-render") { + t.Error("Invalid container path mount for by-path option 'single'") + } +} + func TestParsePCIDeviceIDs(t *testing.T) { tests := []struct { name string From 447675bb2bfaa4edebabe98f7157c18d80af64c6 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Fri, 28 Nov 2025 12:03:33 +0200 Subject: [PATCH 08/11] operator: add gpu plugin's by-path option Signed-off-by: Tuomas Katila Co-authored-by: Eero Tamminen --- cmd/gpu_plugin/README.md | 4 ++-- cmd/gpu_plugin/gpu_plugin.go | 2 +- .../bases/deviceplugin.intel.com_gpudeviceplugins.yaml | 10 ++++++++++ pkg/apis/deviceplugin/v1/gpudeviceplugin_types.go | 6 ++++++ pkg/controllers/gpu/controller.go | 4 ++++ 5 files changed, 23 insertions(+), 3 deletions(-) diff --git a/cmd/gpu_plugin/README.md b/cmd/gpu_plugin/README.md index ebb3bc74c..34cccedc4 100644 --- a/cmd/gpu_plugin/README.md +++ b/cmd/gpu_plugin/README.md @@ -275,8 +275,8 @@ To support possible all use cases, GPU plugin allows changing the by-path mounti * `single` - Symlinks are individually mounted per device. Default. * Mostly Works, but is known to have issues with some pytorch workloads. See [issue](https://github.com/intel/intel-device-plugins-for-kubernetes/issues/2158). * `none` - No symlinks are mounted. - * Aligned with docker use where devices are included with privileged mode. -* `all` - All symlinks are mounted even if only one is allocated by the container. + * Aligned with Docker `privileged` mode devices usage. +* `all` - Mounts whole DRM `by-path` directory. Pro: symlink file types are preserved. Con: symlinks are present for all devices. * Optimal for scale-up workloads where all the GPUs are used by the workload. ### Issues with media workloads on multi-GPU setups diff --git a/cmd/gpu_plugin/gpu_plugin.go b/cmd/gpu_plugin/gpu_plugin.go index 8c494fb08..c3bc65061 100644 --- a/cmd/gpu_plugin/gpu_plugin.go +++ b/cmd/gpu_plugin/gpu_plugin.go @@ -811,7 +811,7 @@ func main() { flag.StringVar(&prefix, "prefix", "", "Prefix for devfs & sysfs paths") flag.BoolVar(&opts.enableMonitoring, "enable-monitoring", false, "whether to enable '*_monitoring' (= all GPUs) resource") flag.BoolVar(&opts.healthManagement, "health-management", false, "enable GPU health management") - flag.StringVar(&opts.bypathMount, "bypath", bypathOptionSingle, "bypath mounting options: single, none, all. Default: single") + flag.StringVar(&opts.bypathMount, "bypath", bypathOptionSingle, "DRI device 'by-path/' directory mounting options: single, none, all. Default: single") flag.BoolVar(&opts.wslScan, "wsl", false, "scan for / use WSL devices") flag.IntVar(&opts.sharedDevNum, "shared-dev-num", 1, "number of containers sharing the same GPU device") flag.IntVar(&opts.globalTempLimit, "temp-limit", 100, "Global temperature limit at which device is marked unhealthy") diff --git a/deployments/operator/crd/bases/deviceplugin.intel.com_gpudeviceplugins.yaml b/deployments/operator/crd/bases/deviceplugin.intel.com_gpudeviceplugins.yaml index 0446bd40a..09aaf631d 100644 --- a/deployments/operator/crd/bases/deviceplugin.intel.com_gpudeviceplugins.yaml +++ b/deployments/operator/crd/bases/deviceplugin.intel.com_gpudeviceplugins.yaml @@ -62,6 +62,16 @@ spec: The list can contain IDs in the form of '0x1234,0x49a4,0x50b4'. Cannot be used together with DenyIDs. type: string + bypathMode: + description: |- + ByPathMode changes how plugin handles the DRM by-path/ directory mounting for GPU devices. + See GPU plugin documentation for detailed description of the modes. + If left empty, it defaults to 'single'. + enum: + - none + - single + - all + type: string denyIDs: description: |- DenyIDs is a comma-separated list of PCI IDs of GPU devices that should only be denied by the plugin. diff --git a/pkg/apis/deviceplugin/v1/gpudeviceplugin_types.go b/pkg/apis/deviceplugin/v1/gpudeviceplugin_types.go index c97943c98..959f29cab 100644 --- a/pkg/apis/deviceplugin/v1/gpudeviceplugin_types.go +++ b/pkg/apis/deviceplugin/v1/gpudeviceplugin_types.go @@ -51,6 +51,12 @@ type GpuDevicePluginSpec struct { // +kubebuilder:validation:Enum=balanced;packed;none PreferredAllocationPolicy string `json:"preferredAllocationPolicy,omitempty"` + // ByPathMode changes how plugin handles the DRM by-path/-dir mounting for GPU devices. + // See GPU plugin documentation for detailed description of the modes. + // If left empty, it defaults to 'single'. + // +kubebuilder:validation:Enum=none;single;all + ByPathMode string `json:"bypathMode,omitempty"` + // Specialized nodes (e.g., with accelerators) can be Tainted to make sure unwanted pods are not scheduled on them. Tolerations can be set for the plugin pod to neutralize the Taint. Tolerations []v1.Toleration `json:"tolerations,omitempty"` diff --git a/pkg/controllers/gpu/controller.go b/pkg/controllers/gpu/controller.go index bc7b68b54..8c72f00ed 100644 --- a/pkg/controllers/gpu/controller.go +++ b/pkg/controllers/gpu/controller.go @@ -285,5 +285,9 @@ func getPodArgs(gdp *devicepluginv1.GpuDevicePlugin) []string { args = append(args, "-deny-ids", gdp.Spec.DenyIDs) } + if gdp.Spec.ByPathMode != "" { + args = append(args, "-bypath", gdp.Spec.ByPathMode) + } + return args } From 0cf8fbf402e678298baf1a4a585acca6cf670259 Mon Sep 17 00:00:00 2001 From: Mikko Ylinen Date: Thu, 20 Nov 2025 08:57:25 +0200 Subject: [PATCH 09/11] demo: sgx: fix DCAP download checksum and bump versions DCAP repository was renamed and this changes the download checksum. The result is that the image build fails and blocks CI. Update the DCAP repository url, download checksum, and the release version. Also, move the base image(s) from jammy to noble. Signed-off-by: Mikko Ylinen --- demo/sgx-aesmd-demo/Dockerfile | 6 +++--- demo/sgx-sdk-demo/Dockerfile | 22 +++++++++++----------- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/demo/sgx-aesmd-demo/Dockerfile b/demo/sgx-aesmd-demo/Dockerfile index 78b9f7a7c..8fe984053 100644 --- a/demo/sgx-aesmd-demo/Dockerfile +++ b/demo/sgx-aesmd-demo/Dockerfile @@ -1,9 +1,9 @@ # This Dockerfile is currently provided as a reference to build aesmd with ECDSA attestation # but is not published along with the device plugin container images. -FROM ubuntu:22.04 +FROM ubuntu:24.04 -RUN apt update && apt install -y curl gnupg-agent \ - && echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu jammy main" | \ +RUN apt update && apt install -y curl gpg \ + && echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu noble main" | \ tee -a /etc/apt/sources.list.d/intel-sgx.list \ && curl -s https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | \ gpg --dearmor --output /usr/share/keyrings/intel-sgx.gpg \ diff --git a/demo/sgx-sdk-demo/Dockerfile b/demo/sgx-sdk-demo/Dockerfile index 66d6684ac..3a798cc6e 100644 --- a/demo/sgx-sdk-demo/Dockerfile +++ b/demo/sgx-sdk-demo/Dockerfile @@ -1,4 +1,4 @@ -FROM ubuntu:22.04 AS builder +FROM ubuntu:24.04 AS builder WORKDIR /root @@ -23,9 +23,9 @@ RUN apt-get update && \ # SGX SDK is installed in /opt/intel directory. WORKDIR /opt/intel -ARG DCAP_VERSION=DCAP_1.21 +ARG DCAP_VERSION=DCAP_1.23 -RUN echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu jammy main" | \ +RUN echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu noble main" | \ tee -a /etc/apt/sources.list.d/intel-sgx.list \ && wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | \ gpg --dearmor --output /usr/share/keyrings/intel-sgx.gpg \ @@ -37,7 +37,7 @@ RUN echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://d libsgx-quote-ex-dev # Install SGX SDK -ARG SGX_SDK_URL=https://download.01.org/intel-sgx/sgx-linux/2.24/distro/ubuntu22.04-server/sgx_linux_x64_sdk_2.24.100.3.bin +ARG SGX_SDK_URL=https://download.01.org/intel-sgx/sgx-linux/2.26/distro/ubuntu24.04-server/sgx_linux_x64_sdk_2.26.100.0.bin RUN wget ${SGX_SDK_URL} \ && export SGX_SDK_INSTALLER=$(basename $SGX_SDK_URL) \ && chmod +x $SGX_SDK_INSTALLER \ @@ -49,11 +49,11 @@ RUN cd sgxsdk/SampleCode/SampleEnclave \ && make \ && cd - -ARG DCAP_TARBALL_SHA256="f0336fef8263b4c53664efb8486c021ca3d996817eb63b0671324a0acf706310" +ARG DCAP_TARBALL_SHA256="9284ac7223f72daaeed8fb3c5bb3e4b1ccee6c2deafd0e7398c95c9fa50ffe8a" -RUN wget -q https://github.com/intel/SGXDataCenterAttestationPrimitives/archive/$DCAP_VERSION.tar.gz && \ +RUN wget -q https://github.com/intel/confidential-computing.tee.dcap/archive/$DCAP_VERSION.tar.gz && \ echo "$DCAP_TARBALL_SHA256 $DCAP_VERSION.tar.gz" | sha256sum -c - && \ - tar xzf $DCAP_VERSION.tar.gz && mv SGXDataCenterAttestationPrimitives* SGXDataCenterAttestationPrimitives + tar xzf $DCAP_VERSION.tar.gz && mv confidential-computing.tee.dcap* SGXDataCenterAttestationPrimitives RUN cd SGXDataCenterAttestationPrimitives/SampleCode/QuoteGenerationSample \ && . /opt/intel/sgxsdk/environment \ @@ -66,15 +66,15 @@ RUN cd SGXDataCenterAttestationPrimitives/SampleCode/QuoteVerificationSample \ && sgx_sign sign -key ../QuoteGenerationSample/Enclave/Enclave_private_sample.pem -enclave enclave.so -out enclave.signed.so -config Enclave/Enclave.config.xml \ && cd - -FROM ubuntu:22.04 +FROM ubuntu:24.04 RUN apt-get update && \ apt-get install -y \ wget \ - gnupg-agent + gnupg # Add 01.org to apt for SGX packages and install SGX runtime components -RUN echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu jammy main" | \ +RUN echo "deb [arch=amd64 signed-by=/usr/share/keyrings/intel-sgx.gpg] https://download.01.org/intel-sgx/sgx_repo/ubuntu noble main" | \ tee -a /etc/apt/sources.list.d/intel-sgx.list \ && wget -qO - https://download.01.org/intel-sgx/sgx_repo/ubuntu/intel-sgx-deb.key | \ gpg --dearmor --output /usr/share/keyrings/intel-sgx.gpg \ @@ -102,4 +102,4 @@ COPY --from=builder /opt/intel/SGXDataCenterAttestationPrimitives/SampleCode/Quo COPY --chmod=555 run-dcap-flow /opt/intel -ENTRYPOINT /opt/intel/sgx-sample-app/sgx-sample-app +ENTRYPOINT ["/opt/intel/sgx-sample-app/sgx-sample-app"] From b30386f5d7da9ffea660eafb7325857f42662f75 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Thu, 4 Dec 2025 15:22:17 +0200 Subject: [PATCH 10/11] go: update x/crypto Signed-off-by: Tuomas Katila --- go.mod | 16 ++++++++-------- go.sum | 32 ++++++++++++++++---------------- 2 files changed, 24 insertions(+), 24 deletions(-) diff --git a/go.mod b/go.mod index b48b8417d..98325ebb9 100644 --- a/go.mod +++ b/go.mod @@ -13,8 +13,8 @@ require ( github.com/pkg/errors v0.9.1 github.com/prometheus/client_model v0.6.2 github.com/prometheus/common v0.66.1 - golang.org/x/sys v0.36.0 - golang.org/x/text v0.29.0 + golang.org/x/sys v0.38.0 + golang.org/x/text v0.31.0 google.golang.org/grpc v1.75.0 google.golang.org/protobuf v1.36.9 gopkg.in/yaml.v2 v2.4.0 @@ -94,15 +94,15 @@ require ( go.uber.org/automaxprocs v1.6.0 // indirect go.yaml.in/yaml/v2 v2.4.2 // indirect go.yaml.in/yaml/v3 v3.0.4 // indirect - golang.org/x/crypto v0.41.0 // indirect + golang.org/x/crypto v0.45.0 // indirect golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect - golang.org/x/mod v0.27.0 // indirect - golang.org/x/net v0.43.0 // indirect + golang.org/x/mod v0.29.0 // indirect + golang.org/x/net v0.47.0 // indirect golang.org/x/oauth2 v0.30.0 // indirect - golang.org/x/sync v0.17.0 // indirect - golang.org/x/term v0.34.0 // indirect + golang.org/x/sync v0.18.0 // indirect + golang.org/x/term v0.37.0 // indirect golang.org/x/time v0.9.0 // indirect - golang.org/x/tools v0.36.0 // indirect + golang.org/x/tools v0.38.0 // indirect gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20250707201910-8d1bb00bc6a7 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20250707201910-8d1bb00bc6a7 // indirect diff --git a/go.sum b/go.sum index 484535dce..cfb22b20c 100644 --- a/go.sum +++ b/go.sum @@ -218,48 +218,48 @@ go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= -golang.org/x/crypto v0.41.0 h1:WKYxWedPGCTVVl5+WHSSrOBT0O8lx32+zxmHxijgXp4= -golang.org/x/crypto v0.41.0/go.mod h1:pO5AFd7FA68rFak7rOAGVuygIISepHftHnr8dr6+sUc= +golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q= +golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4= golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 h1:2dVuKD2vS7b0QIHQbpyTISPd0LeHDbnYEryqj5Q1ug8= golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56/go.mod h1:M4RDyNAINzryxdtnbRXRL/OHtkFuWGRjvuhBJpk2IlY= golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= -golang.org/x/mod v0.27.0 h1:kb+q2PyFnEADO2IEF935ehFUXlWiNjJWtRNgBLSfbxQ= -golang.org/x/mod v0.27.0/go.mod h1:rWI627Fq0DEoudcK+MBkNkCe0EetEaDSwJJkCcjpazc= +golang.org/x/mod v0.29.0 h1:HV8lRxZC4l2cr3Zq1LvtOsi/ThTgWnUk/y64QSs8GwA= +golang.org/x/mod v0.29.0/go.mod h1:NyhrlYXJ2H4eJiRy/WDBO6HMqZQ6q9nk4JzS3NuCK+w= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= -golang.org/x/net v0.43.0 h1:lat02VYK2j4aLzMzecihNvTlJNQUq316m2Mr9rnM6YE= -golang.org/x/net v0.43.0/go.mod h1:vhO1fvI4dGsIjh73sWfUVjj3N7CA9WkKJNQm2svM6Jg= +golang.org/x/net v0.47.0 h1:Mx+4dIFzqraBXUugkia1OOvlD6LemFo1ALMHjrXDOhY= +golang.org/x/net v0.47.0/go.mod h1:/jNxtkgq5yWUGYkaZGqo27cfGZ1c5Nen03aYrrKpVRU= golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI= golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKlU= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.17.0 h1:l60nONMj9l5drqw6jlhIELNv9I0A4OFgRsG9k2oT9Ug= -golang.org/x/sync v0.17.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI= +golang.org/x/sync v0.18.0 h1:kr88TuHDroi+UVf+0hZnirlk8o8T+4MrK6mr60WkH/I= +golang.org/x/sync v0.18.0/go.mod h1:9KTHXmSnoGruLpwFjVSX0lNNA75CykiMECbovNTZqGI= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20191115151921-52ab43148777/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.36.0 h1:KVRy2GtZBrk1cBYA7MKu5bEZFxQk4NIDV6RLVcC8o0k= -golang.org/x/sys v0.36.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= -golang.org/x/term v0.34.0 h1:O/2T7POpk0ZZ7MAzMeWFSg6S5IpWd/RXDlM9hgM3DR4= -golang.org/x/term v0.34.0/go.mod h1:5jC53AEywhIVebHgPVeg0mj8OD3VO9OzclacVrqpaAw= +golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc= +golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= +golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU= +golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= -golang.org/x/text v0.29.0 h1:1neNs90w9YzJ9BocxfsQNHKuAT4pkghyXc4nhZ6sJvk= -golang.org/x/text v0.29.0/go.mod h1:7MhJOA9CD2qZyOKYazxdYMF85OwPdEr9jTtBpO7ydH4= +golang.org/x/text v0.31.0 h1:aC8ghyu4JhP8VojJ2lEHBnochRno1sgL6nEi9WGFGMM= +golang.org/x/text v0.31.0/go.mod h1:tKRAlv61yKIjGGHX/4tP1LTbc13YSec1pxVEWXzfoeM= golang.org/x/time v0.9.0 h1:EsRrnYcQiGH+5FfbgvV4AP7qEZstoyrHB0DzarOQ4ZY= golang.org/x/time v0.9.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE= golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= -golang.org/x/tools v0.36.0 h1:kWS0uv/zsvHEle1LbV5LE8QujrxB3wfQyxHfhOk0Qkg= -golang.org/x/tools v0.36.0/go.mod h1:WBDiHKJK8YgLHlcQPYQzNCkUxUypCaa5ZegCVutKm+s= +golang.org/x/tools v0.38.0 h1:Hx2Xv8hISq8Lm16jvBZ2VQf+RLmbd7wVUsALibYI/IQ= +golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= From a1fc47db9e765749c36cc515d34e3f63dd6fbfb5 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Thu, 4 Dec 2025 15:17:02 +0200 Subject: [PATCH 11/11] images: set 0.34.1 tag for the release Signed-off-by: Tuomas Katila --- Makefile | 2 +- demo/dlb-libdlb-demo-pf-pod.yaml | 2 +- demo/dlb-libdlb-demo-pod.yaml | 4 ++-- demo/dlb-libdlb-demo-vf-pod.yaml | 2 +- demo/dsa-accel-config-demo-pod.yaml | 2 +- demo/dsa-dpdk-dmadevtest.yaml | 2 +- demo/iaa-accel-config-demo-pod.yaml | 2 +- demo/intelfpga-job.yaml | 2 +- demo/test-fpga-orchestrated.yaml | 2 +- demo/test-fpga-preprogrammed.yaml | 2 +- deployments/dlb_plugin/base/intel-dlb-plugin.yaml | 2 +- .../overlays/dlb_initcontainer/dlb_initcontainer.yaml | 2 +- deployments/dsa_plugin/base/intel-dsa-plugin.yaml | 2 +- .../overlays/dsa_initcontainer/dsa_initcontainer.yaml | 2 +- deployments/fpga_admissionwebhook/manager/manager.yaml | 2 +- .../fpga_plugin/base/intel-fpga-plugin-daemonset.yaml | 4 ++-- deployments/gpu_plugin/base/intel-gpu-plugin.yaml | 2 +- deployments/gpu_plugin/overlays/levelzero/levelzero.yaml | 2 +- deployments/iaa_plugin/base/intel-iaa-plugin.yaml | 2 +- .../overlays/iaa_initcontainer/iaa_initcontainer.yaml | 2 +- deployments/npu_plugin/base/intel-npu-plugin.yaml | 2 +- deployments/operator/manager/manager.yaml | 2 +- .../operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml | 4 ++-- .../operator/samples/deviceplugin_v1_dsadeviceplugin.yaml | 4 ++-- .../samples/deviceplugin_v1_fpgadeviceplugin.yaml | 4 ++-- .../operator/samples/deviceplugin_v1_gpudeviceplugin.yaml | 2 +- .../operator/samples/deviceplugin_v1_iaadeviceplugin.yaml | 4 ++-- .../operator/samples/deviceplugin_v1_npudeviceplugin.yaml | 2 +- .../operator/samples/deviceplugin_v1_qatdeviceplugin.yaml | 4 ++-- .../operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml | 2 +- .../compress-perf-dpdk-pod-requesting-qat-dc.yaml | 2 +- .../compress-perf-dpdk-pod-requesting-qat-generic.yaml | 2 +- .../crypto-perf-dpdk-pod-requesting-qat-cy.yaml | 2 +- .../crypto-perf-dpdk-pod-requesting-qat-generic.yaml | 2 +- deployments/qat_plugin/base/intel-qat-plugin.yaml | 2 +- .../overlays/qat_initcontainer/qat_initcontainer.yaml | 2 +- deployments/sgx_admissionwebhook/manager/manager.yaml | 2 +- deployments/sgx_enclave_apps/base/intelsgx-job.yaml | 2 +- .../sgx_ecdsa_inproc_quote/add_sgx_default_qcnl_conf.yaml | 2 +- deployments/sgx_plugin/base/intel-sgx-plugin.yaml | 2 +- .../sgx_plugin/overlays/epc-register/init-daemonset.yaml | 2 +- .../overlays/cert-manager/xpumanager.yaml | 2 +- .../xpumanager_sidecar/overlays/http/xpumanager.yaml | 2 +- pkg/controllers/fpga/controller_test.go | 2 +- test/e2e/fpga/fpga.go | 2 +- test/e2e/qat/qatplugin_dpdk.go | 8 ++++---- test/e2e/sgx/sgx.go | 2 +- 47 files changed, 57 insertions(+), 57 deletions(-) diff --git a/Makefile b/Makefile index 90e3f7063..b7519fb16 100644 --- a/Makefile +++ b/Makefile @@ -135,7 +135,7 @@ clean: ORG?=intel REG?=$(ORG)/ -TAG?=0.34.0 +TAG?=0.34.1 export TAG ifeq ($(E2E_LEVEL), $(filter $(E2E_LEVEL), full)) diff --git a/demo/dlb-libdlb-demo-pf-pod.yaml b/demo/dlb-libdlb-demo-pf-pod.yaml index cdd6bd81a..833301b07 100644 --- a/demo/dlb-libdlb-demo-pf-pod.yaml +++ b/demo/dlb-libdlb-demo-pf-pod.yaml @@ -6,7 +6,7 @@ spec: restartPolicy: Never containers: - name: dlb-libdlb-demo-pf-pod - image: intel/dlb-libdlb-demo:0.34.0 + image: intel/dlb-libdlb-demo:0.34.1 imagePullPolicy: IfNotPresent resources: limits: diff --git a/demo/dlb-libdlb-demo-pod.yaml b/demo/dlb-libdlb-demo-pod.yaml index a26179b19..15cea8c2c 100644 --- a/demo/dlb-libdlb-demo-pod.yaml +++ b/demo/dlb-libdlb-demo-pod.yaml @@ -6,7 +6,7 @@ spec: restartPolicy: Never containers: - name: pf - image: intel/dlb-libdlb-demo:0.34.0 + image: intel/dlb-libdlb-demo:0.34.1 imagePullPolicy: IfNotPresent resources: limits: @@ -18,7 +18,7 @@ spec: cpu: 1 memory: 200Mi - name: vf - image: intel/dlb-libdlb-demo:0.34.0 + image: intel/dlb-libdlb-demo:0.34.1 imagePullPolicy: IfNotPresent resources: limits: diff --git a/demo/dlb-libdlb-demo-vf-pod.yaml b/demo/dlb-libdlb-demo-vf-pod.yaml index a1d0c6a5e..b5b0cd550 100644 --- a/demo/dlb-libdlb-demo-vf-pod.yaml +++ b/demo/dlb-libdlb-demo-vf-pod.yaml @@ -6,7 +6,7 @@ spec: restartPolicy: Never containers: - name: dlb-libdlb-demo-vf-pod - image: intel/dlb-libdlb-demo:0.34.0 + image: intel/dlb-libdlb-demo:0.34.1 command: [ "sh", "-c", "/usr/local/bin/dir_traffic -n 8 -w epoll -d $(ls /dev/dlb* | sed 's/\\/dev\\/dlb//')" ] imagePullPolicy: IfNotPresent resources: diff --git a/demo/dsa-accel-config-demo-pod.yaml b/demo/dsa-accel-config-demo-pod.yaml index b7c9b56fe..f56a87a8b 100644 --- a/demo/dsa-accel-config-demo-pod.yaml +++ b/demo/dsa-accel-config-demo-pod.yaml @@ -7,7 +7,7 @@ metadata: spec: containers: - name: dsa-accel-config-demo - image: intel/accel-config-demo:0.34.0 + image: intel/accel-config-demo:0.34.1 imagePullPolicy: IfNotPresent workingDir: "/usr/libexec/accel-config/test/" command: diff --git a/demo/dsa-dpdk-dmadevtest.yaml b/demo/dsa-dpdk-dmadevtest.yaml index aea271f57..af00c3281 100644 --- a/demo/dsa-dpdk-dmadevtest.yaml +++ b/demo/dsa-dpdk-dmadevtest.yaml @@ -6,7 +6,7 @@ spec: restartPolicy: Never containers: - name: dpdk - image: intel/dsa-dpdk-dmadevtest:0.34.0 + image: intel/dsa-dpdk-dmadevtest:0.34.1 securityContext: capabilities: add: ["SYS_RAWIO"] diff --git a/demo/iaa-accel-config-demo-pod.yaml b/demo/iaa-accel-config-demo-pod.yaml index b7346c3d5..2f99ec454 100644 --- a/demo/iaa-accel-config-demo-pod.yaml +++ b/demo/iaa-accel-config-demo-pod.yaml @@ -7,7 +7,7 @@ metadata: spec: containers: - name: iaa-accel-config-demo - image: intel/accel-config-demo:0.34.0 + image: intel/accel-config-demo:0.34.1 workingDir: "/usr/libexec/accel-config/test/" command: - "./iaa_user_test_runner.sh" diff --git a/demo/intelfpga-job.yaml b/demo/intelfpga-job.yaml index 3a02155d8..4705592c6 100644 --- a/demo/intelfpga-job.yaml +++ b/demo/intelfpga-job.yaml @@ -13,7 +13,7 @@ spec: restartPolicy: Never containers: - name: intelfpga-demo-job-1 - image: intel/opae-nlb-demo:0.34.0 + image: intel/opae-nlb-demo:0.34.1 imagePullPolicy: IfNotPresent securityContext: capabilities: diff --git a/demo/test-fpga-orchestrated.yaml b/demo/test-fpga-orchestrated.yaml index 477486955..9f8377ee8 100644 --- a/demo/test-fpga-orchestrated.yaml +++ b/demo/test-fpga-orchestrated.yaml @@ -5,7 +5,7 @@ metadata: spec: containers: - name: test-container - image: intel/opae-nlb-demo:0.34.0 + image: intel/opae-nlb-demo:0.34.1 imagePullPolicy: IfNotPresent securityContext: capabilities: diff --git a/demo/test-fpga-preprogrammed.yaml b/demo/test-fpga-preprogrammed.yaml index f93dcdaba..a06730b2e 100644 --- a/demo/test-fpga-preprogrammed.yaml +++ b/demo/test-fpga-preprogrammed.yaml @@ -5,7 +5,7 @@ metadata: spec: containers: - name: test-container - image: intel/opae-nlb-demo:0.34.0 + image: intel/opae-nlb-demo:0.34.1 imagePullPolicy: IfNotPresent securityContext: capabilities: diff --git a/deployments/dlb_plugin/base/intel-dlb-plugin.yaml b/deployments/dlb_plugin/base/intel-dlb-plugin.yaml index b3cba0e5e..6e8acd49b 100644 --- a/deployments/dlb_plugin/base/intel-dlb-plugin.yaml +++ b/deployments/dlb_plugin/base/intel-dlb-plugin.yaml @@ -26,7 +26,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-dlb-plugin:0.34.0 + image: intel/intel-dlb-plugin:0.34.1 imagePullPolicy: IfNotPresent securityContext: readOnlyRootFilesystem: true diff --git a/deployments/dlb_plugin/overlays/dlb_initcontainer/dlb_initcontainer.yaml b/deployments/dlb_plugin/overlays/dlb_initcontainer/dlb_initcontainer.yaml index 4a5cb2057..1c41e4cff 100644 --- a/deployments/dlb_plugin/overlays/dlb_initcontainer/dlb_initcontainer.yaml +++ b/deployments/dlb_plugin/overlays/dlb_initcontainer/dlb_initcontainer.yaml @@ -7,7 +7,7 @@ spec: spec: initContainers: - name: intel-dlb-initcontainer - image: intel/intel-dlb-initcontainer:0.34.0 + image: intel/intel-dlb-initcontainer:0.34.1 securityContext: readOnlyRootFilesystem: true privileged: true diff --git a/deployments/dsa_plugin/base/intel-dsa-plugin.yaml b/deployments/dsa_plugin/base/intel-dsa-plugin.yaml index bc2990230..81b1b1233 100644 --- a/deployments/dsa_plugin/base/intel-dsa-plugin.yaml +++ b/deployments/dsa_plugin/base/intel-dsa-plugin.yaml @@ -26,7 +26,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-dsa-plugin:0.34.0 + image: intel/intel-dsa-plugin:0.34.1 imagePullPolicy: IfNotPresent securityContext: seLinuxOptions: diff --git a/deployments/dsa_plugin/overlays/dsa_initcontainer/dsa_initcontainer.yaml b/deployments/dsa_plugin/overlays/dsa_initcontainer/dsa_initcontainer.yaml index 22e84c52c..e9274d50a 100644 --- a/deployments/dsa_plugin/overlays/dsa_initcontainer/dsa_initcontainer.yaml +++ b/deployments/dsa_plugin/overlays/dsa_initcontainer/dsa_initcontainer.yaml @@ -12,7 +12,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-idxd-config-initcontainer:0.34.0 + image: intel/intel-idxd-config-initcontainer:0.34.1 securityContext: seLinuxOptions: type: "container_device_plugin_init_t" diff --git a/deployments/fpga_admissionwebhook/manager/manager.yaml b/deployments/fpga_admissionwebhook/manager/manager.yaml index 734927d57..2c8683e6b 100644 --- a/deployments/fpga_admissionwebhook/manager/manager.yaml +++ b/deployments/fpga_admissionwebhook/manager/manager.yaml @@ -16,7 +16,7 @@ spec: control-plane: controller-manager spec: containers: - - image: intel/intel-fpga-admissionwebhook:0.34.0 + - image: intel/intel-fpga-admissionwebhook:0.34.1 imagePullPolicy: IfNotPresent name: manager securityContext: diff --git a/deployments/fpga_plugin/base/intel-fpga-plugin-daemonset.yaml b/deployments/fpga_plugin/base/intel-fpga-plugin-daemonset.yaml index 7f80f74f1..9ac5c64e0 100644 --- a/deployments/fpga_plugin/base/intel-fpga-plugin-daemonset.yaml +++ b/deployments/fpga_plugin/base/intel-fpga-plugin-daemonset.yaml @@ -21,7 +21,7 @@ spec: spec: initContainers: - name: intel-fpga-initcontainer - image: intel/intel-fpga-initcontainer:0.34.0 + image: intel/intel-fpga-initcontainer:0.34.1 imagePullPolicy: IfNotPresent securityContext: readOnlyRootFilesystem: true @@ -36,7 +36,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-fpga-plugin:0.34.0 + image: intel/intel-fpga-plugin:0.34.1 imagePullPolicy: IfNotPresent args: - -mode=af diff --git a/deployments/gpu_plugin/base/intel-gpu-plugin.yaml b/deployments/gpu_plugin/base/intel-gpu-plugin.yaml index 1452c5b31..e0237724f 100644 --- a/deployments/gpu_plugin/base/intel-gpu-plugin.yaml +++ b/deployments/gpu_plugin/base/intel-gpu-plugin.yaml @@ -29,7 +29,7 @@ spec: valueFrom: fieldRef: fieldPath: status.hostIP - image: intel/intel-gpu-plugin:0.34.0 + image: intel/intel-gpu-plugin:0.34.1 imagePullPolicy: IfNotPresent securityContext: seLinuxOptions: diff --git a/deployments/gpu_plugin/overlays/levelzero/levelzero.yaml b/deployments/gpu_plugin/overlays/levelzero/levelzero.yaml index fa4490df6..1fc5a15ef 100644 --- a/deployments/gpu_plugin/overlays/levelzero/levelzero.yaml +++ b/deployments/gpu_plugin/overlays/levelzero/levelzero.yaml @@ -2,7 +2,7 @@ path: /spec/template/spec/containers/- value: name: intel-gpu-levelzero - image: intel/intel-gpu-levelzero:0.34.0 + image: intel/intel-gpu-levelzero:0.34.1 imagePullPolicy: IfNotPresent args: - "-v=2" diff --git a/deployments/iaa_plugin/base/intel-iaa-plugin.yaml b/deployments/iaa_plugin/base/intel-iaa-plugin.yaml index f84dfd2d5..cdbbcab84 100644 --- a/deployments/iaa_plugin/base/intel-iaa-plugin.yaml +++ b/deployments/iaa_plugin/base/intel-iaa-plugin.yaml @@ -26,7 +26,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-iaa-plugin:0.34.0 + image: intel/intel-iaa-plugin:0.34.1 imagePullPolicy: IfNotPresent securityContext: seLinuxOptions: diff --git a/deployments/iaa_plugin/overlays/iaa_initcontainer/iaa_initcontainer.yaml b/deployments/iaa_plugin/overlays/iaa_initcontainer/iaa_initcontainer.yaml index e78f679cd..b4d3c87e1 100644 --- a/deployments/iaa_plugin/overlays/iaa_initcontainer/iaa_initcontainer.yaml +++ b/deployments/iaa_plugin/overlays/iaa_initcontainer/iaa_initcontainer.yaml @@ -14,7 +14,7 @@ spec: fieldPath: spec.nodeName - name: DEVICE_TYPE value: "iaa" - image: intel/intel-idxd-config-initcontainer:0.34.0 + image: intel/intel-idxd-config-initcontainer:0.34.1 securityContext: seLinuxOptions: type: "container_device_plugin_init_t" diff --git a/deployments/npu_plugin/base/intel-npu-plugin.yaml b/deployments/npu_plugin/base/intel-npu-plugin.yaml index 1ec0148fb..215ee8fcc 100644 --- a/deployments/npu_plugin/base/intel-npu-plugin.yaml +++ b/deployments/npu_plugin/base/intel-npu-plugin.yaml @@ -25,7 +25,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-npu-plugin:0.34.0 + image: intel/intel-npu-plugin:0.34.1 imagePullPolicy: IfNotPresent securityContext: seLinuxOptions: diff --git a/deployments/operator/manager/manager.yaml b/deployments/operator/manager/manager.yaml index 8763963eb..08f38c1d2 100644 --- a/deployments/operator/manager/manager.yaml +++ b/deployments/operator/manager/manager.yaml @@ -30,7 +30,7 @@ spec: manager: intel-deviceplugin-operator spec: containers: - - image: docker.io/intel/intel-deviceplugin-operator:0.34.0 + - image: docker.io/intel/intel-deviceplugin-operator:0.34.1 imagePullPolicy: IfNotPresent name: manager args: diff --git a/deployments/operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml index c738a9783..8ac6d089f 100644 --- a/deployments/operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_dlbdeviceplugin.yaml @@ -3,8 +3,8 @@ kind: DlbDevicePlugin metadata: name: dlbdeviceplugin-sample spec: - image: intel/intel-dlb-plugin:0.34.0 - initImage: intel/intel-dlb-initcontainer:0.34.0 + image: intel/intel-dlb-plugin:0.34.1 + initImage: intel/intel-dlb-initcontainer:0.34.1 logLevel: 4 nodeSelector: intel.feature.node.kubernetes.io/dlb: 'true' diff --git a/deployments/operator/samples/deviceplugin_v1_dsadeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_dsadeviceplugin.yaml index 382ec1fda..5351c72d6 100644 --- a/deployments/operator/samples/deviceplugin_v1_dsadeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_dsadeviceplugin.yaml @@ -3,8 +3,8 @@ kind: DsaDevicePlugin metadata: name: dsadeviceplugin-sample spec: - image: intel/intel-dsa-plugin:0.34.0 - initImage: intel/intel-idxd-config-initcontainer:0.34.0 + image: intel/intel-dsa-plugin:0.34.1 + initImage: intel/intel-idxd-config-initcontainer:0.34.1 sharedDevNum: 10 logLevel: 4 nodeSelector: diff --git a/deployments/operator/samples/deviceplugin_v1_fpgadeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_fpgadeviceplugin.yaml index d30478866..1dd712761 100644 --- a/deployments/operator/samples/deviceplugin_v1_fpgadeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_fpgadeviceplugin.yaml @@ -3,8 +3,8 @@ kind: FpgaDevicePlugin metadata: name: fpgadeviceplugin-sample spec: - image: intel/intel-fpga-plugin:0.34.0 - initImage: intel/intel-fpga-initcontainer:0.34.0 + image: intel/intel-fpga-plugin:0.34.1 + initImage: intel/intel-fpga-initcontainer:0.34.1 mode: region logLevel: 4 nodeSelector: diff --git a/deployments/operator/samples/deviceplugin_v1_gpudeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_gpudeviceplugin.yaml index 90b168c90..eb687ce65 100644 --- a/deployments/operator/samples/deviceplugin_v1_gpudeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_gpudeviceplugin.yaml @@ -3,7 +3,7 @@ kind: GpuDevicePlugin metadata: name: gpudeviceplugin-sample spec: - image: intel/intel-gpu-plugin:0.34.0 + image: intel/intel-gpu-plugin:0.34.1 sharedDevNum: 10 logLevel: 4 enableMonitoring: true diff --git a/deployments/operator/samples/deviceplugin_v1_iaadeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_iaadeviceplugin.yaml index 422393ab6..226acdd8e 100644 --- a/deployments/operator/samples/deviceplugin_v1_iaadeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_iaadeviceplugin.yaml @@ -3,8 +3,8 @@ kind: IaaDevicePlugin metadata: name: iaadeviceplugin-sample spec: - image: intel/intel-iaa-plugin:0.34.0 - initImage: intel/intel-idxd-config-initcontainer:0.34.0 + image: intel/intel-iaa-plugin:0.34.1 + initImage: intel/intel-idxd-config-initcontainer:0.34.1 sharedDevNum: 10 logLevel: 4 nodeSelector: diff --git a/deployments/operator/samples/deviceplugin_v1_npudeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_npudeviceplugin.yaml index 61893f4b0..4a726070b 100644 --- a/deployments/operator/samples/deviceplugin_v1_npudeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_npudeviceplugin.yaml @@ -3,7 +3,7 @@ kind: NpuDevicePlugin metadata: name: npudeviceplugin-sample spec: - image: intel/intel-npu-plugin:0.34.0 + image: intel/intel-npu-plugin:0.34.1 sharedDevNum: 1 logLevel: 4 nodeSelector: diff --git a/deployments/operator/samples/deviceplugin_v1_qatdeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_qatdeviceplugin.yaml index ce7565cbc..81a44fd9f 100644 --- a/deployments/operator/samples/deviceplugin_v1_qatdeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_qatdeviceplugin.yaml @@ -3,8 +3,8 @@ kind: QatDevicePlugin metadata: name: qatdeviceplugin-sample spec: - image: intel/intel-qat-plugin:0.34.0 - initImage: intel/intel-qat-initcontainer:0.34.0 + image: intel/intel-qat-plugin:0.34.1 + initImage: intel/intel-qat-initcontainer:0.34.1 dpdkDriver: vfio-pci kernelVfDrivers: - 4xxxvf diff --git a/deployments/operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml b/deployments/operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml index 7203d69b5..ddb317152 100644 --- a/deployments/operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml +++ b/deployments/operator/samples/deviceplugin_v1_sgxdeviceplugin.yaml @@ -3,7 +3,7 @@ kind: SgxDevicePlugin metadata: name: sgxdeviceplugin-sample spec: - image: intel/intel-sgx-plugin:0.34.0 + image: intel/intel-sgx-plugin:0.34.1 enclaveLimit: 110 provisionLimit: 110 logLevel: 4 diff --git a/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-dc.yaml b/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-dc.yaml index f2850930c..8519b03b0 100644 --- a/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-dc.yaml +++ b/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-dc.yaml @@ -5,7 +5,7 @@ metadata: spec: containers: - name: compress-perf - image: intel/crypto-perf:0.34.0 + image: intel/crypto-perf:0.34.1 imagePullPolicy: IfNotPresent env: - name: TESTCMD diff --git a/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-generic.yaml b/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-generic.yaml index f2850930c..8519b03b0 100644 --- a/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-generic.yaml +++ b/deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-generic.yaml @@ -5,7 +5,7 @@ metadata: spec: containers: - name: compress-perf - image: intel/crypto-perf:0.34.0 + image: intel/crypto-perf:0.34.1 imagePullPolicy: IfNotPresent env: - name: TESTCMD diff --git a/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-cy.yaml b/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-cy.yaml index 4f0af98d6..673272a68 100644 --- a/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-cy.yaml +++ b/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-cy.yaml @@ -5,7 +5,7 @@ metadata: spec: containers: - name: crypto-perf - image: intel/crypto-perf:0.34.0 + image: intel/crypto-perf:0.34.1 imagePullPolicy: IfNotPresent env: - name: TESTCMD diff --git a/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-generic.yaml b/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-generic.yaml index 1a11f727c..a795d8969 100644 --- a/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-generic.yaml +++ b/deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-generic.yaml @@ -5,7 +5,7 @@ metadata: spec: containers: - name: crypto-perf - image: intel/crypto-perf:0.34.0 + image: intel/crypto-perf:0.34.1 imagePullPolicy: IfNotPresent env: - name: TESTCMD diff --git a/deployments/qat_plugin/base/intel-qat-plugin.yaml b/deployments/qat_plugin/base/intel-qat-plugin.yaml index 1682d071b..585185b67 100644 --- a/deployments/qat_plugin/base/intel-qat-plugin.yaml +++ b/deployments/qat_plugin/base/intel-qat-plugin.yaml @@ -26,7 +26,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-qat-plugin:0.34.0 + image: intel/intel-qat-plugin:0.34.1 securityContext: seLinuxOptions: type: "container_device_plugin_t" diff --git a/deployments/qat_plugin/overlays/qat_initcontainer/qat_initcontainer.yaml b/deployments/qat_plugin/overlays/qat_initcontainer/qat_initcontainer.yaml index 696f890c8..9390381b8 100644 --- a/deployments/qat_plugin/overlays/qat_initcontainer/qat_initcontainer.yaml +++ b/deployments/qat_plugin/overlays/qat_initcontainer/qat_initcontainer.yaml @@ -12,7 +12,7 @@ spec: valueFrom: fieldRef: fieldPath: spec.nodeName - image: intel/intel-qat-initcontainer:0.34.0 + image: intel/intel-qat-initcontainer:0.34.1 securityContext: readOnlyRootFilesystem: true privileged: true diff --git a/deployments/sgx_admissionwebhook/manager/manager.yaml b/deployments/sgx_admissionwebhook/manager/manager.yaml index 685b52f2c..d393c8c61 100644 --- a/deployments/sgx_admissionwebhook/manager/manager.yaml +++ b/deployments/sgx_admissionwebhook/manager/manager.yaml @@ -16,7 +16,7 @@ spec: control-plane: controller-manager spec: containers: - - image: intel/intel-sgx-admissionwebhook:0.34.0 + - image: intel/intel-sgx-admissionwebhook:0.34.1 imagePullPolicy: IfNotPresent name: manager securityContext: diff --git a/deployments/sgx_enclave_apps/base/intelsgx-job.yaml b/deployments/sgx_enclave_apps/base/intelsgx-job.yaml index 79b3dc434..3c0fd2ebf 100644 --- a/deployments/sgx_enclave_apps/base/intelsgx-job.yaml +++ b/deployments/sgx_enclave_apps/base/intelsgx-job.yaml @@ -14,7 +14,7 @@ spec: containers: - name: intelsgx-demo-job-1 - image: intel/sgx-sdk-demo:0.34.0 + image: intel/sgx-sdk-demo:0.34.1 imagePullPolicy: IfNotPresent workingDir: "/opt/intel/sgx-sample-app/" command: ["/opt/intel/sgx-sample-app/sgx-sample-app"] diff --git a/deployments/sgx_enclave_apps/overlays/sgx_ecdsa_inproc_quote/add_sgx_default_qcnl_conf.yaml b/deployments/sgx_enclave_apps/overlays/sgx_ecdsa_inproc_quote/add_sgx_default_qcnl_conf.yaml index cf17665c5..e4f17ca15 100644 --- a/deployments/sgx_enclave_apps/overlays/sgx_ecdsa_inproc_quote/add_sgx_default_qcnl_conf.yaml +++ b/deployments/sgx_enclave_apps/overlays/sgx_ecdsa_inproc_quote/add_sgx_default_qcnl_conf.yaml @@ -7,7 +7,7 @@ spec: spec: containers: - name: intelsgx-demo-job-1 - image: intel/sgx-sdk-demo:0.34.0 + image: intel/sgx-sdk-demo:0.34.1 volumeMounts: - name: qplconf mountPath: /etc/sgx_default_qcnl.conf diff --git a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml index d044c0406..c239abd9b 100644 --- a/deployments/sgx_plugin/base/intel-sgx-plugin.yaml +++ b/deployments/sgx_plugin/base/intel-sgx-plugin.yaml @@ -21,7 +21,7 @@ spec: automountServiceAccountToken: false containers: - name: intel-sgx-plugin - image: intel/intel-sgx-plugin:0.34.0 + image: intel/intel-sgx-plugin:0.34.1 securityContext: seLinuxOptions: type: "container_device_plugin_t" diff --git a/deployments/sgx_plugin/overlays/epc-register/init-daemonset.yaml b/deployments/sgx_plugin/overlays/epc-register/init-daemonset.yaml index a0696c729..c30b3c307 100644 --- a/deployments/sgx_plugin/overlays/epc-register/init-daemonset.yaml +++ b/deployments/sgx_plugin/overlays/epc-register/init-daemonset.yaml @@ -16,7 +16,7 @@ spec: serviceAccountName: sgx-plugin containers: - name: sgx-node-init - image: intel/intel-sgx-initcontainer:0.34.0 + image: intel/intel-sgx-initcontainer:0.34.1 imagePullPolicy: IfNotPresent command: - /usr/local/bin/sgx-sw/intel-sgx-epchook diff --git a/deployments/xpumanager_sidecar/overlays/cert-manager/xpumanager.yaml b/deployments/xpumanager_sidecar/overlays/cert-manager/xpumanager.yaml index 185d2110c..052aa1b82 100644 --- a/deployments/xpumanager_sidecar/overlays/cert-manager/xpumanager.yaml +++ b/deployments/xpumanager_sidecar/overlays/cert-manager/xpumanager.yaml @@ -41,7 +41,7 @@ spec: httpGet: scheme: HTTPS - name: xelink-sidecar - image: intel/intel-xpumanager-sidecar:0.34.0 + image: intel/intel-xpumanager-sidecar:0.34.1 imagePullPolicy: IfNotPresent args: - -v=2 diff --git a/deployments/xpumanager_sidecar/overlays/http/xpumanager.yaml b/deployments/xpumanager_sidecar/overlays/http/xpumanager.yaml index 2b031bbda..060ca24a4 100644 --- a/deployments/xpumanager_sidecar/overlays/http/xpumanager.yaml +++ b/deployments/xpumanager_sidecar/overlays/http/xpumanager.yaml @@ -13,7 +13,7 @@ spec: path: "/etc/kubernetes/node-feature-discovery/features.d/" containers: - name: xelink-sidecar - image: intel/intel-xpumanager-sidecar:0.34.0 + image: intel/intel-xpumanager-sidecar:0.34.1 imagePullPolicy: IfNotPresent args: - -v=2 diff --git a/pkg/controllers/fpga/controller_test.go b/pkg/controllers/fpga/controller_test.go index 58d9b301d..553b4412b 100644 --- a/pkg/controllers/fpga/controller_test.go +++ b/pkg/controllers/fpga/controller_test.go @@ -215,7 +215,7 @@ func TestNewDaemonSetFPGA(t *testing.T) { plugin := &devicepluginv1.FpgaDevicePlugin{ Spec: devicepluginv1.FpgaDevicePluginSpec{ - InitImage: "intel/intel-fpga-initcontainer:0.34.0", + InitImage: "intel/intel-fpga-initcontainer:0.34.1", }, } plugin.Name = "testing" diff --git a/test/e2e/fpga/fpga.go b/test/e2e/fpga/fpga.go index 746f55b11..0d179496e 100644 --- a/test/e2e/fpga/fpga.go +++ b/test/e2e/fpga/fpga.go @@ -143,7 +143,7 @@ func runDevicePlugin(ctx context.Context, fmw *framework.Framework, pluginKustom func runTestCase(ctx context.Context, fmw *framework.Framework, pluginMode, podResource, cmd1, cmd2 string) { resource := v1.ResourceName(podResource) - image := "intel/opae-nlb-demo:0.34.0" + image := "intel/opae-nlb-demo:0.34.1" ginkgo.By("submitting a pod requesting correct FPGA resources") diff --git a/test/e2e/qat/qatplugin_dpdk.go b/test/e2e/qat/qatplugin_dpdk.go index 7ab8eff34..fd21f5031 100644 --- a/test/e2e/qat/qatplugin_dpdk.go +++ b/test/e2e/qat/qatplugin_dpdk.go @@ -131,7 +131,7 @@ func describeQatDpdkPlugin() { "runTests=" + strconv.Itoa(symmetric), "signOfLife=1", } - pod := createPod(ctx, f, "cpa-sample-code", resourceName, "intel/openssl-qat-engine:0.34.0", command) + pod := createPod(ctx, f, "cpa-sample-code", resourceName, "intel/openssl-qat-engine:0.34.1", command) ginkgo.By("waiting the cpa-sample-code pod for the resource " + resourceName.String() + " to finish successfully") err := e2epod.WaitForPodSuccessInNamespaceTimeout(ctx, f.ClientSet, pod.ObjectMeta.Name, f.Namespace.Name, 300*time.Second) @@ -158,7 +158,7 @@ func describeQatDpdkPlugin() { "-v", "-hw_algo", "0x0029", } - pod := createPod(ctx, f, "qat-engine-testapp", resourceName, "intel/openssl-qat-engine:0.34.0", command) + pod := createPod(ctx, f, "qat-engine-testapp", resourceName, "intel/openssl-qat-engine:0.34.1", command) ginkgo.By("waiting the qat-engine-testapp pod for the resource " + resourceName.String() + " to finish successfully") err := e2epod.WaitForPodSuccessInNamespaceTimeout(ctx, f.ClientSet, pod.ObjectMeta.Name, f.Namespace.Name, 300*time.Second) @@ -185,7 +185,7 @@ func describeQatDpdkPlugin() { "runTests=" + strconv.Itoa(compression), "signOfLife=1", } - pod := createPod(ctx, f, "cpa-sample-code", resourceName, "intel/openssl-qat-engine:0.34.0", command) + pod := createPod(ctx, f, "cpa-sample-code", resourceName, "intel/openssl-qat-engine:0.34.1", command) ginkgo.By("waiting the cpa-sample-code pod for the resource " + resourceName.String() + " to finish successfully") err := e2epod.WaitForPodSuccessInNamespaceTimeout(ctx, f.ClientSet, pod.ObjectMeta.Name, f.Namespace.Name, 300*time.Second) @@ -254,7 +254,7 @@ func describeQatDpdkPlugin() { "runTests=" + strconv.Itoa(compression), "signOfLife=1", } - pod := createPod(ctx, f, "cpa-sample-code", resourceName, "intel/openssl-qat-engine:0.34.0", command) + pod := createPod(ctx, f, "cpa-sample-code", resourceName, "intel/openssl-qat-engine:0.34.1", command) ginkgo.By("waiting the cpa-sample-code pod for the resource " + resourceName.String() + " to finish successfully") err := e2epod.WaitForPodSuccessInNamespaceTimeout(ctx, f.ClientSet, pod.ObjectMeta.Name, f.Namespace.Name, 300*time.Second) diff --git a/test/e2e/sgx/sgx.go b/test/e2e/sgx/sgx.go index 9723a51ab..7a6aecf27 100644 --- a/test/e2e/sgx/sgx.go +++ b/test/e2e/sgx/sgx.go @@ -100,7 +100,7 @@ func describe() { Containers: []v1.Container{ { Name: "testcontainer", - Image: "intel/sgx-sdk-demo:0.34.0", + Image: "intel/sgx-sdk-demo:0.34.1", WorkingDir: "/opt/intel/sgx-sample-app/", Command: []string{"/opt/intel/sgx-sample-app/sgx-sample-app"}, Resources: v1.ResourceRequirements{