Skip to content

feat: The pod is in privileged mode and has declared HAMi-related resources. Its creation is denied.#789

Open
chaunceyjiang wants to merge 748 commits intoProject-HAMi:masterfrom
chaunceyjiang:privileged
Open

feat: The pod is in privileged mode and has declared HAMi-related resources. Its creation is denied.#789
chaunceyjiang wants to merge 748 commits intoProject-HAMi:masterfrom
chaunceyjiang:privileged

Conversation

@chaunceyjiang
Copy link
Copy Markdown
Collaborator

@chaunceyjiang chaunceyjiang commented Jan 8, 2025

What type of PR is this?
/kind feature

What this PR does / why we need it:

Pods with containers in privileged mode and declaring HAMi-related resources should be prevented from being created.

Which issue(s) this PR fixes:
Fixes #790

Test:

image

image

Does this PR introduce a user-facing change?:

limengxuan and others added 30 commits April 17, 2024 18:33
fix: When a node cannot bind, it should stop scheduling pods to that node
Signed-off-by: chaunceyjiang <chaunceyjiang@gmail.com>
Signed-off-by: rongfu.leng <lenronfu@gmail.com>
Signed-off-by: rongfu.leng <lenronfu@gmail.com>
…lect-param

scheduler server add leader elect
KEP: add scheduler policy design doc and code
Signed-off-by: rongfu.leng <lenronfu@gmail.com>
Signed-off-by: calvin <wen.chen@daocloud.io>
Signed-off-by: limengxuan <391013634@qq.com>
yt-huang and others added 25 commits December 22, 2024 10:21
Signed-off-by: yintong.huang <yintong.huang@daocloud.io>
* update documents

Signed-off-by: limengxuan <391013634@qq.com>
Signed-off-by: elrondwong <gfengwong@gmail.com>
add-nodelock-ut

Signed-off-by: learner0810 <zhongjun.li@daocloud.io>
Signed-off-by: penguin <lihan.zhou@daocloud.io>
* update nodelock for mig instance & add document for mig monitor

Signed-off-by: limengxuan <391013634@qq.com>
* update documents for config

Signed-off-by: limengxuan <391013634@qq.com>
* Setting devicePlugin.compatWithCPUManager=true will set PASS_DEVICE_SPECS=true as an environment variable.

Signed-off-by: 张 驰 <919474320@qq.com>

* Change the parameter compatWithCPUManager for setting the PASS_DEVICE_SPECS ENV to passDeviceSpecsEnabled, and set the default value to true.

Signed-off-by: 张 驰 <919474320@qq.com>

---------

Signed-off-by: 张 驰 <919474320@qq.com>
Signed-off-by: learner0810 <zhongjun.li@daocloud.io>
…ler. (Project-HAMi#746)

Signed-off-by: chaunceyjiang <chaunceyjiang@gmail.com>
Signed-off-by: bin <bin.pan@daocloud.io>
Signed-off-by: elrondwong <gfengwong@gmail.com>
Signed-off-by: bin <bin.pan@daocloud.io>
* add star history to readme, fix typos and add more contributors and maintainers.

Signed-off-by: yangshiqi <yangshiqi1089@gmail.com>

* add spaces

Signed-off-by: yangshiqi <yangshiqi1089@gmail.com>

---------

Signed-off-by: yangshiqi <yangshiqi1089@gmail.com>
Signed-off-by: Fengyang <495160589@qq.com>
Signed-off-by: windsonsea <haifeng.yao@daocloud.io>
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
Signed-off-by: yxxhero <aiopsclub@163.com>
Signed-off-by: bin <bin.pan@daocloud.io>
…t-HAMi#767)

Signed-off-by: chaunceyjiang <chaunceyjiang@gmail.com>
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
Signed-off-by: KubeKyrie <shaolong.qin@daocloud.io>
Signed-off-by: learner0810 <zhongjun.li@daocloud.io>
Signed-off-by: chaunceyjiang <chaunceyjiang@gmail.com>
@codecov
Copy link
Copy Markdown

codecov bot commented Jan 8, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
unittests 47.24% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines Coverage Δ
pkg/device/ascend/device.go 87.30% <ø> (ø)
pkg/device/cambricon/device.go 88.62% <ø> (ø)
pkg/device/devices.go 0.00% <ø> (ø)
pkg/device/hygon/device.go 23.22% <ø> (ø)
pkg/device/iluvatar/device.go 29.86% <ø> (ø)
pkg/device/metax/device.go 26.85% <ø> (ø)
pkg/device/mthreads/device.go 21.30% <ø> (ø)
pkg/device/nvidia/device.go 37.76% <ø> (ø)
pkg/k8sutil/client.go 0.00% <ø> (ø)
pkg/k8sutil/pod.go 100.00% <ø> (ø)
... and 19 more
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

…ources. Its creation is denied.

Signed-off-by: chaunceyjiang <chaunceyjiang@gmail.com>
@lengrongfu
Copy link
Copy Markdown
Member

/lgtm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Pods in privileged mode keep encountering the UnexpectedAdmissionError error.