Clean up chart and introduce KubeVirt device plugin

charts/fpga-cloud/Chart.yaml

@@ -15,7 +15,6 @@ annotations:
     url: https://keybase.io/inaccel/pgp_keys.asc
   category: Infrastructure
 apiVersion: v2
-appVersion: "1.0.3"
 description: Simplifying FPGA management in Harvester
 home: https://inaccel.com
 icon: https://gravatar.com/avatar/86a385a9d4ca0ccdfb2ed637cf9f3308
@@ -30,4 +29,4 @@ sources:
 - https://docs.inaccel.com
 - https://github.com/inaccel/helm
 type: application
-version: 1.1.2
+version: 1.2.0

charts/fpga-cloud/README.md

@@ -32,19 +32,25 @@ deletes the release.
 The following table lists the configurable parameters of the InAccel FPGA Cloud
 chart and their default values.
 
-| Parameter                 | Description                                   | Default                 |
-| ------------------------- | --------------------------------------------- | ----------------------- |
-| `cloudInit.debug`         | Argument --debug to the entrypoint.           | `false`                 |
-| `cloudInit.image`         | Container image name.                         | `inaccel/cloud-init`    |
-| `cloudInit.pullPolicy`    | Image pull policy.                            |                         |
-| `cloudInit.resources`     | Compute resources required by this container. |                         |
-| `cloudInit.tag`           | Release version.                              | `latest`                |
-| `kubevirtHack.debug`      | Argument --debug to the entrypoint.           | `false`                 |
-| `kubevirtHack.image`      | Container image name.                         | `inaccel/kubevirt-hack` |
-| `kubevirtHack.pullPolicy` | Image pull policy.                            |                         |
-| `kubevirtHack.resources`  | Compute resources required by this container. |                         |
-| `kubevirtHack.tag`        | Release version.                              | `latest`                |
-| `replicas`                | Number of desired pods.                       |                         |
+| Parameter                   | Description                                   | Default                   |
+| --------------------------- | --------------------------------------------- | ------------------------- |
+| `cloudInit.debug`           | Argument --debug to the entrypoint.           | `false`                   |
+| `cloudInit.image`           | Container image name.                         | `inaccel/cloud-init`      |
+| `cloudInit.pullPolicy`      | Image pull policy.                            |                           |
+| `cloudInit.resources`       | Compute resources required by this container. |                           |
+| `cloudInit.tag`             | Release version.                              | `latest`                  |
+| `deviceSelector.debug`      | Argument --debug to the entrypoint.           | `false`                   |
+| `deviceSelector.image`      | Container image name.                         | `inaccel/device-selector` |
+| `deviceSelector.pullPolicy` | Image pull policy.                            |                           |
+| `deviceSelector.resources`  | Compute resources required by this container. |                           |
+| `deviceSelector.tag`        | Release version.                              | `latest`                  |
+| `kubelet`                   | Directory path for managing kubelet files.    | `/var/lib/kubelet`        |
+| `kubevirtHack.debug`        | Argument --debug to the entrypoint.           | `false`                   |
+| `kubevirtHack.image`        | Container image name.                         | `inaccel/kubevirt-hack`   |
+| `kubevirtHack.pullPolicy`   | Image pull policy.                            |                           |
+| `kubevirtHack.resources`    | Compute resources required by this container. |                           |
+| `kubevirtHack.tag`          | Release version.                              | `latest`                  |
+| `replicas`                  | Number of desired pods.                       |                           |
 
 Specify each parameter using the `--set key=value[,key=value]` argument to
 `helm install`.

charts/fpga-cloud/templates/cluster-role.yaml

@@ -14,7 +14,7 @@ rules:
   verbs: ["get", "update"]
 - apiGroups: ["kubevirt.io"]
   resources: ["kubevirts"]
-  verbs: ["get", "patch"]
+  verbs: ["get"]
 - apiGroups: ["kubevirt.io"]
   resources: ["virtualmachines"]
   verbs: ["get", "list", "update", "watch"]

charts/fpga-cloud/templates/daemon-set.yaml

@@ -0,0 +1,64 @@
+---
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  labels:
+    {{- include "labels" $ | nindent 4 }}
+  name: {{ $.Chart.Name }}
+  namespace: {{ $.Release.Namespace }}
+spec:
+  selector:
+    matchLabels:
+      kind: DaemonSet
+      {{- include "selectorLabels" $ | nindent 6 }}
+  template:
+    metadata:
+      annotations:
+        kubectl.kubernetes.io/default-container: device-selector
+      labels:
+        kind: DaemonSet
+        {{- include "labels" $ | nindent 8 }}
+    spec:
+      containers:
+      - args:
+        - --debug={{ $.Values.deviceSelector.debug }}
+        env:
+        - name: KUBE_VIRT_NAME
+          value: kubevirt
+        - name: KUBE_VIRT_NAMESPACE
+          value: harvester-system
+        image: {{ $.Values.deviceSelector.image }}:{{ $.Values.deviceSelector.tag }}
+        {{- if $.Values.deviceSelector.pullPolicy }}
+        imagePullPolicy: {{ $.Values.deviceSelector.pullPolicy }}
+        {{- end }}
+        name: device-selector
+        {{- if $.Values.deviceSelector.resources }}
+        resources:
+          {{- $.Values.deviceSelector.resources | toYaml | nindent 10 }}
+        {{- end }}
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /lib/modules
+          name: modules
+        - mountPath: /sys
+          name: sys
+        - mountPath: /var/lib/kubelet/plugins_registry
+          name: kubelet
+          subPath: plugins_registry
+      hostAliases:
+      - hostnames:
+        - device-selector
+        ip: 127.0.0.1
+      priorityClassName: system-node-critical
+      serviceAccountName: {{ $.Chart.Name }}
+      volumes:
+      - hostPath:
+          path: {{ $.Values.kubelet }}
+        name: kubelet
+      - hostPath:
+          path: /lib/modules
+        name: modules
+      - hostPath:
+          path: /sys
+        name: sys