feat(helm): update chart intel-device-plugins-operator ( 0.31.1 → 0.32.0 )

[repo-jeeves]

This PR contains the following updates:

Package	Update	Change
intel-device-plugins-operator	minor	0.31.1 -> 0.32.0

---

Release Notes

intel/helm-charts (intel-device-plugins-operator)

v0.32.0

Compare Source

A Helm chart for Intel GPU Device Plugin

[repo-jeeves]

--- kubernetes/main/apps/system/intel-device-plugin Kustomization: system/intel-device-plugin HelmRelease: system/intel-device-plugin-operator

+++ kubernetes/main/apps/system/intel-device-plugin Kustomization: system/intel-device-plugin HelmRelease: system/intel-device-plugin-operator

@@ -13,13 +13,13 @@

     spec:
       chart: intel-device-plugins-operator
       sourceRef:
         kind: HelmRepository
         name: intel-charts
         namespace: flux-system
-      version: 0.31.1
+      version: 0.32.0
   install:
     crds: CreateReplace
     remediation:
       retries: 3
   interval: 15m
   maxHistory: 2

[repo-jeeves]

--- HelmRelease: system/intel-device-plugin-operator ClusterRole: system/inteldeviceplugins-proxy-role

+++ HelmRelease: system/intel-device-plugin-operator ClusterRole: system/inteldeviceplugins-proxy-role

@@ -1,19 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: inteldeviceplugins-proxy-role
-rules:
-- apiGroups:
-  - authentication.k8s.io
-  resources:
-  - tokenreviews
-  verbs:
-  - create
-- apiGroups:
-  - authorization.k8s.io
-  resources:
-  - subjectaccessreviews
-  verbs:
-  - create
-
--- HelmRelease: system/intel-device-plugin-operator ClusterRoleBinding: system/inteldeviceplugins-proxy-rolebinding

+++ HelmRelease: system/intel-device-plugin-operator ClusterRoleBinding: system/inteldeviceplugins-proxy-rolebinding

@@ -1,14 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: inteldeviceplugins-proxy-rolebinding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: inteldeviceplugins-proxy-role
-subjects:
-- kind: ServiceAccount
-  name: default
-  namespace: system
-
--- HelmRelease: system/intel-device-plugin-operator Deployment: system/inteldeviceplugins-controller-manager

+++ HelmRelease: system/intel-device-plugin-operator Deployment: system/inteldeviceplugins-controller-manager

@@ -14,20 +14,36 @@

   template:
     metadata:
       labels:
         control-plane: controller-manager
     spec:
       containers:
-      - args: null
+      - args:
+        - --metrics-bind-address=:8443
+        - --metrics-secure
+        - --health-probe-bind-address=:8081
+        - --leader-elect
         env:
         - name: DEVICEPLUGIN_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/intel-deviceplugin-operator:0.31.1
+        image: intel/intel-deviceplugin-operator:0.32.0
         imagePullPolicy: IfNotPresent
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: 8081
+          initialDelaySeconds: 15
+          periodSeconds: 20
+        readinessProbe:
+          httpGet:
+            path: /readyz
+            port: 8081
+          initialDelaySeconds: 5
+          periodSeconds: 10
         name: manager
         ports:
         - containerPort: 9443
           name: webhook-server
           protocol: TCP
         resources:
@@ -49,35 +65,17 @@

           seccompProfile:
             type: RuntimeDefault
         volumeMounts:
         - mountPath: /tmp/k8s-webhook-server/serving-certs
           name: cert
           readOnly: true
-      - args:
-        - --secure-listen-address=0.0.0.0:8443
-        - --upstream=http://127.0.0.1:8080/
-        - --logtostderr=true
-        - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
-        - --v=10
-        image: quay.io/brancz/kube-rbac-proxy:v0.18.1
-        name: kube-rbac-proxy
-        ports:
-        - containerPort: 8443
-          name: https
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          runAsGroup: 1000
-          runAsNonRoot: true
-          runAsUser: 1000
-          seccompProfile:
-            type: RuntimeDefault
       nodeSelector:
         kubernetes.io/arch: amd64
       serviceAccountName: default
       terminationGracePeriodSeconds: 10
       volumes:
       - name: cert
         secret:
           defaultMode: 420
           secretName: webhook-server-cert
+      tolerations: []
 
--- HelmRelease: system/intel-device-plugin-operator ClusterRole: system/inteldeviceplugins-auth-role

+++ HelmRelease: system/intel-device-plugin-operator ClusterRole: system/inteldeviceplugins-auth-role

@@ -0,0 +1,19 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: inteldeviceplugins-auth-role
+rules:
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
+
--- HelmRelease: system/intel-device-plugin-operator ClusterRoleBinding: system/inteldeviceplugins-auth-rolebinding

+++ HelmRelease: system/intel-device-plugin-operator ClusterRoleBinding: system/inteldeviceplugins-auth-rolebinding

@@ -0,0 +1,14 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: inteldeviceplugins-auth-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: inteldeviceplugins-auth-role
+subjects:
+- kind: ServiceAccount
+  name: default
+  namespace: system
+