Optimize monitoring performance

.github/ISSUE_TEMPLATE/bug-report.md

@@ -0,0 +1,33 @@
+---
+name: Bug Report
+about: Report a bug encountered while using HAMi.
+labels: kind/bug
+
+---
+
+<!-- Please use this template while reporting a bug and provide as much info as possible. Not doing so may result in your bug not being addressed in a timely manner. Thanks!
+-->
+
+**What happened**:
+
+**What you expected to happen**:
+
+**How to reproduce it (as minimally and precisely as possible)**:
+
+**Anything else we need to know?**:
+
+- The output of `nvidia-smi -a` on your host
+- Your docker or containerd configuration file (e.g: `/etc/docker/daemon.json`)
+- The hami-device-plugin container logs
+- The hami-scheduler container logs
+- The kubelet logs on the node (e.g: `sudo journalctl -r -u kubelet`)
+- Any relevant kernel output lines from `dmesg`
+
+**Environment**:
+- HAMi version:
+- nvidia driver or other AI device driver version:
+- Docker version from `docker version`
+- Docker command, image and tag used
+- Kernel version from `uname -a`
+- Others:
+

.github/ISSUE_TEMPLATE/enhancement.md

@@ -0,0 +1,22 @@
+---
+name: Enhancement Request
+about: Suggest an enhancement to the project
+labels: kind/feature
+
+---
+<!-- Please only use this template for submitting enhancement requests -->
+
+**What would you like to be added**:
+
+**What type of PR is this?**
+
+/kind feature
+
+**What this PR does / why we need it**:
+
+**Which issue(s) this PR fixes**:
+Fixes #
+
+**Special notes for your reviewer**:
+
+**Does this PR introduce a user-facing change?**:

.github/ISSUE_TEMPLATE/good-first.md

@@ -0,0 +1,31 @@
+---
+name: Good First Issue
+about: Publish a good first issue
+labels: good first issue
+
+---
+
+<!-- Please use this template while publishing a good first issue. Thanks!
+-->
+
+**Task description**:
+
+**Solution**:
+
+**Who can join or take the task**:
+
+The good first issue is intended for `first-time contributors` to get started on his/her contributor journey.
+
+After a contributor has successfully completed 1-2 good first issue's,
+they should be ready to move on to `help wanted` items, saving the remaining `good first issue` for other new contributors.
+
+**How to join or take the task**:
+
+Just reply on the issue with the message `/assign` in a separate line.
+
+Then, the issue will be assigned to you.
+
+**How to ask for help**:
+
+If you need help or have questions, please feel free to ask on this issue.
+The issue author or other members of the community will guide you through the contribution process.

.github/ISSUE_TEMPLATE/question.md

@@ -0,0 +1,15 @@
+---
+name: Question
+about: Question relating to HAMi.
+labels: kind/question
+
+---
+
+**Please provide an in-depth description of the question you have**:
+
+**What do you think about this question?**:
+
+**Environment**:
+- HAMi version:
+- Kubernetes version:
+- Others:

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,22 @@
+**What type of PR is this?**
+
+<!--
+Add one of the following kinds:
+/kind bug
+/kind cleanup
+/kind deprecation
+/kind design
+/kind documentation
+/kind failing-test
+/kind feature
+/kind flake
+-->
+
+**What this PR does / why we need it**:
+
+**Which issue(s) this PR fixes**:
+Fixes #
+
+**Special notes for your reviewer**:
+
+**Does this PR introduce a user-facing change?**:

.github/dependabot.yml

@@ -0,0 +1,21 @@
+
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+
+version: 2
+updates:
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "docker"
+    directory: "/docker"
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily" 

.github/workflows/build-helm-release.yaml

@@ -0,0 +1,36 @@
+name: Release helm
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+    tags:
+      - v*
+
+jobs:
+  helm-release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Configure Git
+        run: |
+          git config user.name "$GITHUB_ACTOR"
+          git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
+
+      - name: Install Helm
+        uses: azure/setup-helm@v4
+        with:
+          version: v3.7.1
+
+      - name: Run chart-releaser
+        uses: helm/chart-releaser-action@v1.6.0
+        with:
+          charts_dir: charts
+        env:
+          CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
+

.github/workflows/build-image-release.yaml

@@ -0,0 +1,77 @@
+name: Release Arm Image
+
+env:
+  REGISTRY: docker.io
+  IMAGE_REPO: projecthami/hami
+  IMAGE_ROOT_PATH: docker
+  BUILD_PLATFORM: linux/arm64
+  REGISTER_USER: ${{ github.actor }}
+  REGISTER_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
+
+on:
+  workflow_dispatch:
+  push:
+    tags:
+      - v*
+
+jobs:
+  docker-build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@master
+      - name: Get the version
+        id: get_version
+        run: |
+          VERSION=${GITHUB_REF#refs/tags/}
+          if [[ ${GITHUB_REF} == "refs/heads/main" ]]; then
+            VERSION=latest
+          fi
+          echo ::set-output name=VERSION::${VERSION}
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Checkout submodule
+        uses: Mushus/checkout-submodule@v1.0.1
+        with:
+          basePath: # optional, default is .
+          submodulePath: libvgpu 
+
+      - name: Docker Login
+        uses: docker/login-action@v3.3.0
+        with:
+            username: ${{ secrets.DOCKERHUB_TOKEN }}
+            password: ${{ secrets.DOCKERHUB_PASSWD }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          driver-opts: image=moby/buildkit:master
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_REPO }}
+
+      - name: Build & Pushing hami image
+        uses: docker/build-push-action@v6.7.0
+        with:
+          context: .
+          file: ${{ env.IMAGE_ROOT_PATH }}/Dockerfile
+          labels: ${{ steps.meta.outputs.labels }}
+          platforms: ${{ env.BUILD_PLATFORM }}
+          build-args: |
+            VERSION=${{ steps.get_version.outputs.VERSION }}
+            GOLANG_IMAGE=golang:1.22.5-bullseye
+            NVIDIA_IMAGE=nvidia/cuda:12.2.0-devel-ubuntu20.04
+            DEST_DIR=/usr/local
+          tags: ${{ steps.meta.outputs.tags }}
+          push: true
+          github-token: ${{ env.REGISTER_PASSWORD }}
+

.github/workflows/ci-image-scanning.yaml

@@ -0,0 +1,62 @@
+name: Trivy Scan
+on:
+  schedule:
+    - cron: "0 0 * * *"
+jobs:
+  trivy-scan:
+    permissions:
+      contents: read # for actions/checkout to fetch code
+      security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
+      actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Checkout submodule
+        uses: Mushus/checkout-submodule@v1.0.1
+        with:
+          basePath: # optional, default is .
+          submodulePath: libvgpu
+      - name: Get branch name
+        uses: nelonoel/branch-name@v1.0.1
+      - name: Docker Login
+        uses: docker/login-action@v3.3.0
+        with:
+          username: ${{ secrets.DOCKERHUB_TOKEN }}
+          password: ${{ secrets.DOCKERHUB_PASSWD }}
+      - name: Set up Docker Buildx
+        id: buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Generating image tag
+        id: runtime-tag
+        run: |
+          echo tag="$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+      - run: make tidy
+      - run: SHORT_VERSION=${{ steps.runtime-tag.outputs.tag }} bash ./hack/build.sh
+      - name: Run Trivy vulnerability scanner (table output)
+        # Prevent running from the forked repository that doesn't need to upload coverage.
+        # In addition, running on the forked repository would fail as missing the necessary secret.
+        if: ${{ github.repository == 'Project-HAMi/HAMi' }}
+        uses: aquasecurity/trivy-action@0.24.0
+        with:
+          image-ref: "projecthami/hami:${{ steps.runtime-tag.outputs.tag }}"
+          format: "table"
+          ignore-unfixed: true
+          severity: "HIGH,CRITICAL"
+          vuln-type: "os,library"
+          trivyignores: .trivyignore
+      - name: Run Trivy vulnerability scanner (SARIF)
+        uses: aquasecurity/trivy-action@0.24.0
+        with:
+          image-ref: "projecthami/hami:${{ steps.runtime-tag.outputs.tag }}"
+          format: "sarif"
+          output: "trivy-results.sarif"
+          ignore-unfixed: true
+          vuln-type: "os,library"
+          trivyignores: .trivyignore
+        if: always() && github.repository == 'Project-HAMi/HAMi'
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: "trivy-results.sarif"
+        if: always() && github.repository == 'Project-HAMi/HAMi'

.github/workflows/ci.yaml

@@ -0,0 +1,59 @@
+name: CI
+on:
+  pull_request:
+  push:
+    branches: ["master"]
+
+env:
+  GO_VERSION: "1.21.6"
+
+jobs:
+  golangci:
+    name: lint
+    runs-on: ubuntu-22.04
+    steps:
+      - name: checkout code
+        uses: actions/checkout@v4
+      - name: install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.21"
+      - name: verify license
+        run: hack/verify-license.sh
+      - name: go tidy
+        run: make tidy
+      - name: lint
+        run: make lint
+      - name: import alias
+        run: hack/verify-import-aliases.sh
+  test:
+    name: Unit test
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Checkout submodule
+        uses: Mushus/checkout-submodule@v1.0.1
+        with:
+          basePath: # optional, default is .
+          submodulePath: libvgpu
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.21"
+      - run: make tidy
+      - run: make test
+      - name: Upload coverage to Codecov
+        # Prevent running from the forked repository that doesn't need to upload coverage.
+        # In addition, running on the forked repository would fail as missing the necessary secret.
+        if: ${{ github.repository == 'Project-HAMi/HAMi' }}
+        uses: codecov/codecov-action@v4
+        with:
+          # Even though token upload token is not required for public repos,
+          # but adding a token might increase successful uploads as per:
+          # https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954
+          token: ${{secrets.CODECOV_TOKEN}}
+          files: ./_output/coverage/coverage.out
+          flags: unittests
+          fail_ci_if_error: false
+          verbose: true