OpenShiftP-281: add test-case example with two pods access to nx-gzip

Signed-off-by: Paul Bastide <[email protected]>

Author: prb112

example/README.md

@@ -0,0 +1,11 @@
+
+
+1. Create namespace `oc new-project ex-dra-driver`
+2. Install Scenario - `kustomize build examples/<scenario> | oc apply -f -`
+3. Uninstall Scenario - `kustomize build examples/<scenario> | oc delete -f -`
+
+
+The scenarios are:
+1. `two-pods-two-distinct-nx-gzip` - Two pods, one container each, Each container asking for access to the nx-gzip
+
+These examples are inspired by https://github.com/kubernetes-sigs/dra-example-driver/tree/main/demo

example/two-pods-two-distinct-nx-gzip/01-sa.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ex-sa

example/two-pods-two-distinct-nx-gzip/02-rbac.yaml

@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ex-sa-rbac
+  namespace: ex-dra-driver
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:openshift:scc:restricted
+subjects:
+- kind: ServiceAccount
+  name: ex-sa

example/two-pods-two-distinct-nx-gzip/03-resource-claim-template.yaml

@@ -0,0 +1,11 @@
+apiVersion: resource.k8s.io/v1beta1
+kind: ResourceClaimTemplate
+metadata:
+  namespace: gpu-test1
+  name: nx-gzip
+spec:
+  spec:
+    devices:
+      requests:
+      - name: nx-gzip
+        deviceClassName: nx.device.power.ibm.com

example/two-pods-two-distinct-nx-gzip/04-deployment-first.yaml

@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ex-power-dra
+  labels:
+    app: ex-power-dra
+spec:
+  selector:
+    matchLabels:
+      app: ex-power-dra
+  template:
+    metadata:
+      labels:
+        app: ex-power-dra
+    spec:
+      containers:
+      - name: driver
+        image: quay.io/powercloud/power-dra-driver:latest
+        imagePullPolicy: IfNotPresent
+        command: [ "/bin/sleep" ]
+        args: [ "infinity" ]
+        resources:
+          limits:
+            memory: 100Mi
+          requests:
+            cpu: 100m
+            memory: 100Mi
+          claims:
+          - name: nx-gzip
+        serviceAccount: ex-sa
+        serviceAccountName: ex-sa
+        securityContext:
+          privileged: false
+          runAsUser: 1000
+          capabilities:
+            drop:
+              - ALL
+          runAsNonRoot: true
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+      resourceClaims:
+      - name: nx-gzip
+        resourceClaimTemplateName: nx-gzip
+      serviceAccount: ex-sa
+      serviceAccountName: ex-sa
+  updateStrategy:
+    type: RollingUpdate

example/two-pods-two-distinct-nx-gzip/05-deployment-second.yaml

@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ex-power-dra
+  labels:
+    app: ex-power-dra
+spec:
+  selector:
+    matchLabels:
+      app: ex-power-dra
+  template:
+    metadata:
+      labels:
+        app: ex-power-dra
+    spec:
+      containers:
+      - name: driver
+        image: quay.io/powercloud/power-dra-driver:latest
+        imagePullPolicy: IfNotPresent
+        command: [ "/bin/sleep" ]
+        args: [ "infinity" ]
+        resources:
+          limits:
+            memory: 100Mi
+          requests:
+            cpu: 100m
+            memory: 100Mi
+          claims:
+          - name: nx-gzip
+        serviceAccount: ex-sa
+        serviceAccountName: ex-sa
+        securityContext:
+          privileged: false
+          runAsUser: 1000
+          capabilities:
+            drop:
+              - ALL
+          runAsNonRoot: true
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+      resourceClaims:
+      - name: nx-gzip
+        resourceClaimTemplateName: nx-gzip
+      serviceAccount: ex-sa
+      serviceAccountName: ex-sa
+  updateStrategy:
+    type: RollingUpdate

example/two-pods-two-distinct-nx-gzip/kustomization.yaml

@@ -0,0 +1,16 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+metadata:
+  name: ex-power-dra
+
+namespace: ex-power-dra
+
+generatorOptions:
+  disableNameSuffixHash: true
+
+resources:
+- 01-sa.yaml
+- 02-rbac.yaml
+- 03-resource-claim-template.yaml
+- 04-deployment-first.yaml
+- 05-deployment-second.yaml