Pcidevices vgpu support (#204)

* changes for vgpu support

* updated rbac permissions

* mount file command from host to pod for local executor

* cleanup empty spaces

Author: ibrokethecloud

charts/harvester-pcidevices-controller/templates/daemonset.yaml

@@ -41,7 +41,16 @@ spec:
               name: sys
             - mountPath: /host/proc
               name: proc
+            - mountPath: /host/usr/lib
+              name: host-lib
+            - mountPath: /host/usr/bin/file
+              name: host-file
+              readOnly: true     
           env:
+          {{- if .Values.debug }}
+            - name: DEBUG_LOGGING
+              value: "true"
+          {{- end }}    
             - name: GHW_DISABLE_WARNINGS
               value: "1"
             - name: NODE_NAME
@@ -80,3 +89,11 @@ spec:
             path: /proc
             type: Directory
           name: proc
+        - hostPath:
+            path: /usr/lib/
+            type: Directory
+          name: host-lib
+        - hostPath:
+            path: /usr/bin/file
+            type: File
+          name: host-file

charts/harvester-pcidevices-controller/templates/serviceaccount.yaml

@@ -25,7 +25,7 @@ rules:
     resources: [ "namespaces" ]
     verbs: [ "get", "watch", "list" ]
   - apiGroups: [ "devices.harvesterhci.io" ]
-    resources: [ "pcidevices", "pcidevices/status", "pcideviceclaims", "pcideviceclaims/status", "sriovnetworkdevices", "sriovnetworkdevices/status", "nodes" ]
+    resources: [ "*" ]
     verbs: [ "get", "watch", "list", "update", "create", "delete"]
   - apiGroups: ["admissionregistration.k8s.io"]
     resources: ["mutatingwebhookconfigurations", "validatingwebhookconfigurations"]
@@ -45,6 +45,12 @@ rules:
   - apiGroups: ["coordination.k8s.io"]
     resources: ["leases"]
     verbs: [ "get", "list", "watch", "create", "update" ]
+  - apiGroups: [ "" ]
+    resources: [ "pods" ]
+    verbs: [ "get", "watch", "list" ]
+  - apiGroups: [ "" ]
+    resources: [ "pods/exec" ]
+    verbs: [ "create" ]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -59,4 +65,4 @@ roleRef:
 subjects:
   - kind: ServiceAccount
     name: {{ include "harvester-pcidevices-controller.serviceAccountName" . }}
-    namespace: harvester-system
+    namespace: harvester-system

charts/harvester-pcidevices-controller/values.yaml

@@ -26,7 +26,6 @@ serviceAccount:
 podAnnotations: {}
 
 podSecurityContext: {}
-  # fsGroup: 2000
 
 securityContext:
   privileged: true
@@ -35,7 +34,6 @@ service:
   type: ClusterIP
   port: 80
 
-
 resources:
   limits:
     cpu: 50m
@@ -44,11 +42,13 @@ resources:
     cpu: 20m
     memory: 200Mi
 
-
 nodeSelector: {}
 
 tolerations:
   - key: node-role.kubernetes.io/master
     effect: NoSchedule
 
 affinity: {}
+
+# enable debug logging for pcidevices controller
+debug: false