update deviceclass to resource.k8s.io/v1alpha3

Add openshiftprivilegerolebinging.yaml to helm build

Signed-off-by: Jason Cho <[email protected]>

Author: jcho02

Dockerfile

@@ -7,18 +7,5 @@ ARG CONTROLLER_GEN_VERSION=0.17.1
 ARG CI_LINT_VERSION=1.52.0
 ARG MOQ_VERSION=0.3.4
 
-WORKDIR /build
-COPY ..
-
 RUN go install github.com/golangci/golangci-lint/cmd/golangci-lint@v${CI_LINT_VERSION}     && go install github.com/matryer/moq@v${MOQ_VERSION}     && go install sigs.k8s.io/controller-tools/cmd/controller-gen@v${CONTROLLER_GEN_VERSION}     && go install k8s.io/code-generator/cmd/client-gen@v${CLIENT_GEN_VERSION}     && go install k8s.io/code-generator/cmd/lister-gen@v${LISTER_GEN_VERSION}     && go install k8s.io/code-generator/cmd/informer-gen@v${INFORMER_GEN_VERSION}
-
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
-LABEL io.k8s.dispaly-name="Power Driver for Dynamic Resource Allocation (DRA)"
-LABEL name="IBM Power DRA Driver"
-LABEL vendor="IBM"
-LABEL version="1.0.0"
-
-RUN microdnf -y update && microdnf clean all
-WORKDIR /
-COPY ./build/entrypoint.sh /
-ENTRYPOINT ["/entrypoint.sh"]
+RUN git config --file=/.gitconfig --add safe.directory /work

Makefile

@@ -3,7 +3,7 @@ ARCH ?= ppc64le
 
 REGISTRY ?= quay.io/jcho0
 REPOSITORY ?= power-dra-driver
-TAG ?= first-test
+TAG ?= v0.1.0
 
 CONTAINER_RUNTIME ?= $(shell command -v podman 2> /dev/null || echo docker)
 

build/helm/power-dra-driver/templates/deviceclass.yaml

@@ -1,4 +1,4 @@
-apiVersion: resource.k8s.io/v1beta1
+apiVersion: resource.k8s.io/v1alpha3
 kind: DeviceClass
 metadata:
   name: gpu.powervs-openshift-ipi.cis.ibm.net

build/helm/power-dra-driver/templates/openshiftprivilegerolebinging.yaml

@@ -0,0 +1,17 @@
+# Apply only when running on OpenShift to let the kublet plugin run privileged
+{{- if .Capabilities.APIVersions.Has "security.openshift.io/v1/SecurityContextConstraints" -}}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "power-dra-driver.fullname" . }}-openshift-privileged-role-binding
+  namespace: {{ include "power-dra-driver.namespace" . }}
+subjects:
+- kind: ServiceAccount
+  name: {{ include "power-dra-driver.serviceAccountName" . }}
+  namespace: {{ include "power-dra-driver.namespace" . }}
+roleRef:
+  kind: ClusterRole
+  name: system:openshift:scc:privileged
+  apiGroup: rbac.authorization.k8s.io
+{{- end }}

build/helm/power-dra-driver/values.yaml

@@ -5,11 +5,11 @@ selectorLabelsOverride: {}
 
 allowDefaultNamespace: false
 
-deviceClasses: ["gpu","mig","imex"]
+deviceClasses: ["gpu"]
 
 imagePullSecrets: []
 image:
-  repository: quay.io/jcho0/power-dra-driver:first-test
+  repository: quay.io/jcho0/power-dra-driver
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
   tag: ""