Releases: intel/intel-device-plugins-for-kubernetes
Releases · intel/intel-device-plugins-for-kubernetes
Intel Device Plugins for Kubernetes v0.35.0
Highlights
This is a minor release 0.35.0 containing new VFIO mode for the DSA plugin and some smaller changes/fixes.
Generic
- Update k8s components to 0.35.1 version
DSA
- Support for VFIO mode (#2194)
- Please note that VFIO mode requires using
vfio-pci.disable_denylist=1in the kernel command line.
- Please note that VFIO mode requires using
NPU
- Add PTL (and others) as supported devices (#2199)
SGX
- Deprecate the DCAP specific resources added in v0.34.x.
-dcap-infra-resourcesarg and related functionality will be removed in the next release.
Bugs fixed
What's Changed (excluding dependabot)
- e2e: add scripts to run e2e tests with k3s by @tkatila in #2148
- gpu: levelzero: use correct struct for temp printing by @tkatila in #2155
- demo: sgx: fix DCAP download checksum and bump versions by @mythi in #2174
- build: disable devel publish by @tkatila in #2171
- qat: handle service parsing via debugfs by @mythi in #2167
- Misc GPU updates by @tkatila in #2172
- Improve by-path symlink issue description slightly by @eero-t in #2179
- ci: add 1.35.x to envtest and e2e tests by @mythi in #2193
- tool version updates and QAT cleanup by @mythi in #2198
- NPU: add device ids for PTL etc. by @tkatila in #2199
- Add support to build UBI based images by @tkatila in #2203
- add vfio based devices to DSA by @mythi in #2194
- Fix broken anchor links in GPU plugin documentation by @Copilot in #2218
- build: bump k8s components to 0.35.1 by @tkatila in #2224
- sgx: mark DcapInfraResource as deprecated by @tkatila in #2225
- gpu: webhook: fix preferred allocation policy check by @tkatila in #2227
- manual bump to controller-runtime v0.23 breaking changes in webhook and client APIs by @mythi in #2226
Full Changelog: v0.34.1...v0.35.0
Contributors
mythi, eero-t, and tkatila
Assets 2
Intel Device Plugins for Kubernetes v0.34.1
Highlights
This is a patch release for 0.34 release containing bug fixes and small features for QAT and GPU plugin.
Generic
- Update x/crypto package
- Update SGX package versions to fix SGX build due to a repository rename
GPU
- Add an option to change how plugin mounts the
by-pathdirectory in the container. - Allow defining different temperature limits for health checking
- Updated Level Zero components
- Fix temperature printing in the plugin
QAT
- Fix service parsing from debugfs (OoT KMD)
Operator
- GPU plugin's by-path mode defined in the CRD
Bugs fixed
Intel Device Plugins for Kubernetes v0.34.0
Highlights
This is a minor release with a new NPU plugin, support for new QAT hardware and various improvements and bug fixes.
Generic
- Kubernetes components updated to 1.34.x.
- Images built using Go 1.25
- DLB and FPGA plugins will be removed from the code base after this release.
GPU
- Supports allow and deny listings to limit the GPUs registered to the cluster resources.
- Removal of
resource managerfunctionality
QAT
- Support for the Gen6 hardware (qat_6xxx)
- Drop unsupported
kerneldrvmode
SGX
- Add new resource types to help DCAP infrastructure
NPU
- New plugin
Operator
- Support imagePullSecret for the device plugin objects
- Detect errors correctly on update (7744aa7)
Bugs fixed
What's Changed (excluding dependabot)
- Add deprecation notices about GAS by @uniemimu in #1965
- deployments: nfd: update DSA/IAA PCI IDs and nfd version by @mythi in #1971
- nfd: gpu: update device IDs by @tkatila in #1973
- Post 0.32 updates by @tkatila in #1975
- build: drop dlb and fpga related images by @tkatila in #1977
- dsa: dpdk example workload and use it in e2e by @tkatila in #1980
- k8s.io v1.32.2 bump and golangci-lint fixes by @mythi in #1989
- build: use Go 1.24 by @mythi in #1990
- operator: fix outdated information by @hj-johannes-lee in #1986
- trivy: ignore CVE-2025-1767 by @tkatila in #2015
- qat: init: detect all system QAT devices by @mythi in #2000
- Switching from i915 to DXG for GPU Acceleration in Kubernetes on WSL by @AmitGujar in #2026
- ci: bump to golangi-lint v2 by @mythi in #2030
- Added new LABEL maintainer to device plugin container images by @chaitanya1731 in #2029
- operator: set pod security admission to privileged by @tkatila in #2045
- build: fix license copy to container images by @tkatila in #2048
- github: disable gnr(d) e2e targets by @mythi in #2049
- build(deps): bump k8s.io to 1.33.0 by @mythi in #2038
- Use standard OCI annotations by @AlexGustafsson in #2041
- gpu levelzero: update the components to support LunarLake in WSL by @tkatila in #2043
- ci: bump to golanci-lint v2.1.6 by @mythi in #2055
- revertme: disable e2e by @tkatila in #2061
- Allow providing a pull secret for the plugin daemonsets by @tkatila in #2074
- build(deps): upgrade k8s.io/kubernetes to 1.33.2 by @tkatila in #2080
- README: update OpenSSF Scorecard link by @mythi in #2096
- Remove deprecated and unused functionality: GPU RM, QAT Kerneldrv, xpumanager-sidecar by @tkatila in #2100
- NPU plugin support by @tkatila in #2066
- qat: QAT Gen6 by @mythi in #2094
- CODEOWNERS: move to global code ownership by @mythi in #2108
- build: use Go 1.25 and trixie by @mythi in #2104
- Gpu: Allow/denylist support to ignore devices (e.g. integrated) by @tkatila in #2101
- gpu: update usage scenarios image by @tkatila in #2107
- add notice about possible genAI use by @tkatila in #2109
- drop unused functionality by @mythi in #2113
- Update GPU plugin README driver section by @eero-t in #2105
- sgx: add two special resources for quoting daemon and SGX platform registration by @mythi in #2103
- gpu: fix breakage with allow/deny list being empty by @tkatila in #2115
- build(deps): bump k8s.io to 1.34.0 by @mythi in #2111
- qat: fix dpdk core selection on high core count systems by @tkatila in #2127
- gpu: demo: convert to a pytorch workload by @tkatila in #2131
- publish: add npu-plugin by @tkatila in #2136
New Contributors
- @AmitGujar made their first contribution in #2026
- @AlexGustafsson made their first contribution in #2041
Full Changelog: v0.32.1...v0.34.0
Contributors
uniemimu, mythi, and 6 other contributors
Assets 2
Intel Device Plugins for Kubernetes v0.32.1
Highlights
This is a patch release with bug fixes and minor enhancements.
Generic
- Updates to direct
go.moddependencies - Added
maintainerlabel to the container images - Add pod security admission labels (
pod-security.kubernetes.io/*: privileged) to operator namespace
GPU
- Fix LunarLake GPU detection in WSL environment: #2039
QAT
- Fix QAT init when the PCI device is not on 0000 bus: #1999
Bugs fixed
Full Changelog: v0.32.0...v0.32.1
Intel Device Plugins for Kubernetes v0.32.0
Highlights
This is a minor release with mostly dependency updates.
Generic
- Update k8s to v1.32.1
- Workflow improvements
Deprecation notice
0.32 will be the last release for the following plugins:
- DLB plugin
- FPGA plugin
GPU Aware Scheduling is being deprecated (#1965). As a side-effect, GPU-plugin's resource management functionality and xpu-manager-sidecar will be removed after 0.32.0.
Operator
- kube-rbac-proxy was dropped from operator deployment in favor of using controller-runtime's functionality
DSA & IAA
- Support for GNR-D and DMR device IDs
QAT
- Improvements to QAT e2e tests
- Enable
auto_resetfunctionality (#1852) - Drop AppArmor annotations
NFD
- Some updates to GPU device IDs
Bugs fixed
What's Changed (excluding dependabot PRs)
- Post 0.31 updates by @tkatila in #1859
- labeler: fix false-failure with nfd file removal test by @tkatila in #1856
- qat, initcontainer: add enablement of auto_reset by @hj-johannes-lee in #1852
- operator: change name prefix of controller-manager by @hj-johannes-lee in #1861
- qat,e2e: add heartbeat and auto-reset validation by @hj-johannes-lee in #1839
- operator: fix upgradeImages by @hj-johannes-lee in #1865
- update main with 0.31.1 release changes by @tkatila in #1886
- QAT, e2e: add qat-engine's testapp case by @hj-johannes-lee in #1885
- Dockerfiles: fix warning for 'FromAsCasing' by @hj-johannes-lee in #1899
- operator: rework webhooks by @mythi in #1906
- codeql: install libze to allow full analysis by @tkatila in #1916
- ci: crypto-perf updates by @mythi in #1927
- workflow: improve trivy vulnerability scanning by @tkatila in #1929
- workflow: declare trivy's permissions within the job by @tkatila in #1934
- operator: drop rbac-proxy in favor of controller-runtime's authz/authn by @tkatila in #1930
- deps: update x/net by @tkatila in #1936
- workflow: add root permissions for periodic trivy by @tkatila in #1952
- depl: drop capabilities from all plugins by @tkatila in #1945
- e2e: fpga: fix false failure by @tkatila in #1955
- qat: drop AppArmor annotations by @mythi in #1860
- trivy: ignore KSV-0118 by @tkatila in #1962
Full Changelog: v0.31.1...v0.32.0
Contributors
mythi, tkatila, and hj-johannes-lee
Assets 2
Intel Device Plugins for Kubernetes v0.31.1
What's Changed
- v0.31.1 fixes a bug where the operator seamless upgrade for pinned images (specified in the OLM bundle) where not upgraded. The bug only impacts users via operatorhub.io/Openshift.
Bugs fixed
Full Changelog: v0.31.0...v0.31.1
Intel Device Plugins for Kubernetes v0.31.0
Highlights
The release adds a new image intel-gpu-levelzero, improves operator to capability level 3 and adds CDI support in selected plugins.
Generic
- Update k8s to v1.31.0
- Build release images using the latest Go version (v1.23.x)
- Add CDI support
- Pin workload actions to SHAs
- Sign published containers
Bugs fixed
FPGA
- Move to CDI hooks to enable
orchestration programmedmode also with containerd.
Operator
- Improve Operator's capability level to 3
GPU
- Initial support for CDI
- Add a new image that allows retrieving GPU details from LevelZero/Sysman
- Support WSL
Pull requests (excluding dependabot)
- xpumanager sidecar: add note about using HTTPS with xpum by @tkatila in #1738
- qat: improve qat_dpdk_app, openssl-qat-engine by @hj-johannes-lee in #1685
- Post 0.30.0 updates by @tkatila in #1739
- demo: opencl-icd: fix repo key install by @tkatila in #1744
- FPGA: support CDI by @bart0sh in #1745
- pkg/deviceplugin: move to grpc.NewClient() by @mythi in #1748
- Pin workflow actions sha's by @tkatila in #1741
- qat: drop c6xxvf from defaults by @mythi in #1751
- idxd: include accel-config sources in the image by @tkatila in #1761
- demo: accel-config-demo updates by @mythi in #1764
- go.mod k8s.io updates and buildah fix by @mythi in #1783
- fpga: add subsystem vendor & device fields to PCIDevice by @jstamel in #1768
- add updateStrategy to daemonSets by @hj-johannes-lee in #1786
- IAA/DSA test updates by @mythi in #1795
- QAT: make plugin read trimmed heartbeat status by @hj-johannes-lee in #1796
- misc version updates by @mythi in #1807
- TLS cipher updates by @tkatila in #1808
- workflow: sign release containers by @tkatila in #1806
- tls: drop additional ciphers by @tkatila in #1811
- build: use Go 1.23.0 by @mythi in #1814
- xpumanager sidecar: verify certificate with HTTPS by @tkatila in #1816
- Restructure CDI use with plugins by @tkatila in #1810
- GPU-plugin: add cdi support by @tkatila in #1827
- workflow: add malware scan for publish by @tkatila in #1829
- Misc fixes vol. 9/2024 by @tkatila in #1835
- Gpu levelzero sidecar by @tkatila in #1803
- levelzero: add missing calloc return value check by @tkatila in #1844
- IAA/DSA config updates by @mythi in #1849
- Add cpu/memory requests and limits by @hj-johannes-lee in #1819
- gpu: add a note about non-default namespaces with fractional resources by @tkatila in #1850
- operator: kube-rbac-proxy to 0.18.1 by @tkatila in #1853
- workflow: publish: enable gpu-levelzero by @tkatila in #1854
New Contributors
Full Changelog: v0.30.0...v0.31.0
Contributors
mythi, bart0sh, and 3 other contributors
Assets 2
Intel Device Plugins for Kubernetes v0.30.0
Highlights
The release adds new functionality to GPU and QAT plugins, and adds toleration support to xDevicePlugin CRDs.
Generic
- Update k8s to v1.30.0
- Build release images using the latest Go version (v1.22.3)
- CI running on a bare metal Intel® Xeon Gen 4 node
Bugs fixed
Operator
- Add tolerations to
xDevicePluginCRDs
GPU
- Add support for the new xe KMD
QAT
- Add support for 420xx QAT devices
- Add AppArmor unconfided annotation configurability in the operator
Pull requests (excluding dependabot)
- Post 0.29.0 updates by @tkatila in #1635
- e2e: sgx: fetch SGX DC attestation primitives as tar.gz by @tkatila in #1636
- doc+test image updates by @mythi in #1637
- privileged is not needed for openshift by @mregmi in #1640
- e2e: fpga: fix intermittent failures by @tkatila in #1639
- qat: Add AppArmor unconfided anntotation configurability in the operator by @ozhuraki in #1591
- Introduce bug,feature request and support templates by @tkatila in #1647
- FPGA: Drop OpenCL UUID bitstream validation by @eliaskoromilas in #1643
- Fix false failures with trivy config scan by @tkatila in #1652
- chore: Fix multiple typos by @hugo-syn in #1653
- minor version updates by @mythi in #1662
- Go 1.22 + version updates by @mythi in #1660
- openssl-qat-engine: update versions by @mythi in #1672
- demo: update idxd-config to v4.1.6 by @mythi in #1680
- webhooks: make SGX mutator registration to follow other webhooks by @mythi in #1677
- GPU: Add support for the new xe KMD by @tkatila in #1670
- Operator: add support for tolerations and add differentiation labels by @tkatila in #1686
- go.mod: upgrade to k8s.io v1.30 release by @mythi in #1698
- ci: update envtest k8s API versions by @mythi in #1714
- images: update toybox to v0.8.11 by @mythi in #1716
- Use SPR BM for e2e by @tkatila in #1699
- workflow: disable codecov report by @tkatila in #1722
- crypto-perf: update dpdk version to 24.03 by @tkatila in #1721
- Add QAT support for 420xx driver and the 4946 device (GNR-D) by @tkatila in #1719
- ci: move to golangci-lint v1.57.2 by @mythi in #1720
- minor version updates by @mythi in #1727
- Fix repo for opencl-icd, workaround build issues and cherry-pick openssl-qat-engine changes by @tkatila in #1728
New Contributors
- @eliaskoromilas made their first contribution in #1643
- @hugo-syn made their first contribution in #1653
Full Changelog: v0.29.0...v0.30.0
Contributors
mregmi, mythi, and 4 other contributors
Assets 2
Intel Device Plugins for Kubernetes v0.29.0
Highlights
The release includes various fixes and updates to components.
Generic
- Update k8s to v1.29.0
- Build release images using the latest Go version (v1.21.5)
- Use stricter build flags
- Updates to workflows and new scorecards
- Build images with buildkit
- Move towards using ktesting/textlogger
Bugs fixed
NFD
- Update SGX deployment to use NFD labels
- Add vfio-pci dependency to QAT rules
Operator
- Allow multiple objects per CR
- Fix operator updating daemonset when CR has not changed
GPU
- Change Level Zero's default affinity mask format when tiles are used, and do not set mask with 1-tile devices
- Set monitoring enabled in the default deployment
- Documentation updates
QAT
- Support QAT heartbeat in >=6.6 kernels
- Add new QAT resources (capabilities)
Fake GPU Device
- Support xelink labeling
VPU
- VPU source code removed from repository
Pull requests (excluding dependabot)
- docs + operator updates to 0.28.0 by @tkatila in #1547
- build: move to Go 1.21.x by @mythi in #1508
- vpu: remove deprecated plugin by @mythi in #1549
- qat: heartbeat support + new capabilities by @tkatila in #1559
- Cleanups by @mythi in #1572
- Misc fixes by @tkatila in #1561
- Update versions (dlb demo and cert-manager, kind) by @hj-johannes-lee in #1543
- controller cleanups by @mythi in #1583
- ci: update golangci-lint by @mythi in #1586
- build: use stricter build flags by @tkatila in #1593
- operator: remove one-cr-per-kind limitation by @tkatila in #1579
- workflows: add scorecard and codeql by @tkatila in #1597
- sgx: use NodeFeatureRule SGX label in the NFD overlay by @mythi in #1596
- xelink support by @hsyrja in #1580
- QAT test updates by @mythi in #1599
- logging: move away from klogr to ktesting/textlogger by @mythi in #1600
- go.mod: upgrade to k8s.io v1.29 by @mythi in #1584
- Minor improvements to "render-device.sh" GPU plugin helper script by @eero-t in #1605
- codeql fixes by @mythi in #1606
- workflow: run codeql for PRs and ignore actions for doc changes by @tkatila in #1608
- Fix last of codeql issues by @tkatila in #1610
- images: use buildkit again by @mythi in #1615
- Change GPU plugin's behavior as Level zero's default hierarchy mode changed from composite to flat by @tkatila in #1601
- go.mod: upgrade to k8s.io v1.29 release by @mythi in #1622
- demo: update idxd-config to v4.1.4 by @mythi in #1618
- ci: cleanup linter settings by @mythi in #1626
- nfd rules: require vfio-pci module to be present for qat by @tkatila in #1627
New Contributors
Full Changelog: v0.28.0...v0.29.0
Contributors
mythi, eero-t, and 3 other contributors
Assets 2
Intel Device Plugins for Kubernetes v0.28.0
Highlights
The release includes various fixes and updates to components.
Generic
- Update k8s to v1.28.2
- Build release images using the latest Go version (v1.20.8)
- NFD updated to 0.14.1
Bugs fixed
Operator
- Added better support for operator bundle with forced plugin digests
- Plugin images can be hard coded via environment variables
- https://github.com/intel/intel-device-plugins-for-kubernetes/tree/main/cmd/operator#upgrade
- Updated to CRD descriptions
GPU
- Functionality from initcontainer moved to GPU plugin and to NFD Feature rules
- Added example tensorflow workload
- Updated documentation
QAT
- Correct a log print verbosity from warning to info
- Updated documentation
E2E
- Restructured code and fixed flows
VPU
- Images will not be published
- VPU plugin and demo code will be removed after 0.28.0 release
Pull requests (excluding dependabot)
- dsa: replace token with read_buffer in conf by @hj-johannes-lee in #1465
- Disable VPU plugin builds by @tkatila in #1456
- demo: crypto-perf, accel-config-demo and openssl-qat-engine updates by @mythi in #1478
- Add SELinux Labels for DSA and IAA by @mregmi in #1479
- Change the regular expression of the device type to support sIOV device by @lzha111 in #1474
- Link fixes, log fix and yaml updates by @tkatila in #1487
- Update references to OpenShift by @hershpa in #1509
- update accel-config version to 4.1 by @hj-johannes-lee in #1516
- tool updates by @mythi in #1524
- images: base image specific toybox config and version updates by @mythi in #1525
- Makefile: update versions & FPGA: fix naked return error from linter by @hj-johannes-lee in #1477
- version updates by @mythi in #1496
- k8s.io 1.28.1 update and SGX rework by @mythi in #1513
- k8s v1.28.2 and NFD updates by @mythi in #1539
- go.mod: update to k8s.io v1.28.0 by @mythi in #1486
- go.mod: bump sigs.k8s.io/controller-runtime from 0.15.1 to 0.16.0 by @mythi in #1507
- e2e: remove duplicate code of testing with operator by @hj-johannes-lee in #1472
- e2e,sgx: divide single It() to have multiple layers by @hj-johannes-lee in #1469
- e2e: fix webhook TLS tests by @mythi in #1488
- e2e: make demo pod logged only when failed running by @hj-johannes-lee in #1470
- e2e,gpu,fpga: divide single It() to have multiple layers by @hj-johannes-lee in #1491
- e2e,dsa,iaa: remove unnecessary layer ginkgo.Describe by @hj-johannes-lee in #1489
- e2e: make running subsets of e2e tests more organized by @hj-johannes-lee in #1512
- e2e: gpu: add a basic tensorflow test by @tkatila in #1374
- gpu: copy nfdhook functionality to gpu-plugin by @tkatila in #1492
- gpu docs update and xpum-sidecar deployment version bump by @tkatila in #1533
- gpu_fakedev: better dra support by @uniemimu in #1518
- Revert "disable gpu e2e test temporarily" by @tkatila in #1501
- operator: add missing IaaDevicePlugin finalizers RBAC by @mythi in #1475
- operator: add image upgrade with env vars by @hj-johannes-lee in #1499
- sgx & gpu crds: improve descriptions by @tkatila in #1534
- sgx: use sgx-sdk-demo app instead of busybox by @hj-johannes-lee in #1464
- webhooks: stop handling Pod updates by @mythi in #1484
- workflows: rework, trivy & publish by @tkatila in #1511
- Workflows/publish fix by @tkatila in #1515
- CI cleanups by @mythi in #1517
- ci: drop kind tests from Jenkins too by @mythi in #1503
- ci: skip linter checks for cmd/vpu_plugin by @mythi in #1473
- envtest for older k8s versions by @mythi in #1541
- qat: update README by @mythi in #1535
- codeowners: add eero-t as reviewer for gpu_fakedev by @tkatila in #1538
- doc: add a release procedures section by @tkatila in #1504
New Contributors
Full Changelog: v0.27.1...v0.28.0
Contributors
uniemimu, mregmi, and 5 other contributors