--- apiVersion: apiextensions.k8s.io/v1 kind: CustomResourceDefinition metadata: annotations: controller-gen.kubebuilder.io/version: v0.16.4 name: nicclusterpolicies.mellanox.com spec: group: mellanox.com names: kind: NicClusterPolicy listKind: NicClusterPolicyList plural: nicclusterpolicies shortNames: - ncp singular: nicclusterpolicy scope: Cluster versions: - additionalPrinterColumns: - jsonPath: .status.state name: Status type: string - jsonPath: .metadata.creationTimestamp name: Age type: string name: v1alpha1 schema: openAPIV3Schema: description: NicClusterPolicy is the Schema for the nicclusterpolicies API properties: apiVersion: description: |- APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources type: string kind: description: |- Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds type: string metadata: type: object spec: description: Defines the desired state of NicClusterPolicy properties: docaTelemetryService: description: |- DOCATelemetryService exposes telemetry from NVIDIA networking components to prometheus. See: https://docs.nvidia.com/doca/sdk/nvidia+doca+telemetry+service+guide/index.html properties: config: description: |- Config contains custom config for the DOCATelemetryService. If set no default config will be deployed. properties: fromConfigMap: description: |- FromConfigMap sets the configMap the DOCATelemetryService gets its configuration from. The ConfigMap must be in the same namespace as the NICClusterPolicy. type: string type: object containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string version: description: Version of the image to use type: string required: - image - repository - version type: object ibKubernetes: description: |- IBKubernetes provides a daemon that works in conjunction with the SR-IOV Network Device Plugin. It acts on Kubernetes pod object changes and reads the pod's network annotation. From there it fetches the corresponding network CRD and reads the PKey. This is done in order to add the newly generated GUID or the predefined GUID in the GUID field of the CRD. This is then passed in cni-args to that PKey for pods with mellanox.infiniband.app annotation. See: https://github.com/Mellanox/ib-kubernetes properties: containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array pKeyGUIDPoolRangeEnd: description: The last guid in the pool type: string pKeyGUIDPoolRangeStart: description: The first guid in the pool type: string periodicUpdateSeconds: default: 5 description: Interval of updates in seconds minimum: 0 type: integer repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string ufmSecret: description: Secret containing credentials to UFM service type: string version: description: Version of the image to use type: string required: - image - pKeyGUIDPoolRangeEnd - pKeyGUIDPoolRangeStart - repository - ufmSecret - version type: object nicFeatureDiscovery: description: |- NicFeatureDiscovery works with NodeFeatureDiscovery to expose information about NVIDIA NICs. https://github.com/Mellanox/nic-feature-discovery properties: containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string version: description: Version of the image to use type: string required: - image - repository - version type: object nodeAffinity: description: NodeAffinity rules to inject to the DaemonSets objects that are managed by the operator properties: preferredDuringSchedulingIgnoredDuringExecution: description: |- The scheduler will prefer to schedule pods to nodes that satisfy the affinity expressions specified by this field, but it may choose a node that violates one or more of the expressions. The node that is most preferred is the one with the greatest sum of weights, i.e. for each node that meets all of the scheduling requirements (resource request, requiredDuringScheduling affinity expressions, etc.), compute a sum by iterating through the elements of this field and adding "weight" to the sum if the node matches the corresponding matchExpressions; the node(s) with the highest sum are the most preferred. items: description: |- An empty preferred scheduling term matches all objects with implicit weight 0 (i.e. it's a no-op). A null preferred scheduling term matches no objects (i.e. is also a no-op). properties: preference: description: A node selector term, associated with the corresponding weight. properties: matchExpressions: description: A list of node selector requirements by node's labels. items: description: |- A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. properties: key: description: The label key that the selector applies to. type: string operator: description: |- Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. type: string values: description: |- An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. items: type: string type: array x-kubernetes-list-type: atomic required: - key - operator type: object type: array x-kubernetes-list-type: atomic matchFields: description: A list of node selector requirements by node's fields. items: description: |- A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. properties: key: description: The label key that the selector applies to. type: string operator: description: |- Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. type: string values: description: |- An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. items: type: string type: array x-kubernetes-list-type: atomic required: - key - operator type: object type: array x-kubernetes-list-type: atomic type: object x-kubernetes-map-type: atomic weight: description: Weight associated with matching the corresponding nodeSelectorTerm, in the range 1-100. format: int32 type: integer required: - preference - weight type: object type: array x-kubernetes-list-type: atomic requiredDuringSchedulingIgnoredDuringExecution: description: |- If the affinity requirements specified by this field are not met at scheduling time, the pod will not be scheduled onto the node. If the affinity requirements specified by this field cease to be met at some point during pod execution (e.g. due to an update), the system may or may not try to eventually evict the pod from its node. properties: nodeSelectorTerms: description: Required. A list of node selector terms. The terms are ORed. items: description: |- A null or empty node selector term matches no objects. The requirements of them are ANDed. The TopologySelectorTerm type implements a subset of the NodeSelectorTerm. properties: matchExpressions: description: A list of node selector requirements by node's labels. items: description: |- A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. properties: key: description: The label key that the selector applies to. type: string operator: description: |- Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. type: string values: description: |- An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. items: type: string type: array x-kubernetes-list-type: atomic required: - key - operator type: object type: array x-kubernetes-list-type: atomic matchFields: description: A list of node selector requirements by node's fields. items: description: |- A node selector requirement is a selector that contains values, a key, and an operator that relates the key and values. properties: key: description: The label key that the selector applies to. type: string operator: description: |- Represents a key's relationship to a set of values. Valid operators are In, NotIn, Exists, DoesNotExist. Gt, and Lt. type: string values: description: |- An array of string values. If the operator is In or NotIn, the values array must be non-empty. If the operator is Exists or DoesNotExist, the values array must be empty. If the operator is Gt or Lt, the values array must have a single element, which will be interpreted as an integer. This array is replaced during a strategic merge patch. items: type: string type: array x-kubernetes-list-type: atomic required: - key - operator type: object type: array x-kubernetes-list-type: atomic type: object x-kubernetes-map-type: atomic type: array x-kubernetes-list-type: atomic required: - nodeSelectorTerms type: object x-kubernetes-map-type: atomic type: object nvIpam: description: |- NvIpam is an IPAM provider that dynamically assigns IP addresses with speed and performance in mind. Note: NvIPam requires certificate management e.g. cert-manager or OpenShift cert management. See https://github.com/Mellanox/nvidia-k8s-ipam properties: containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array enableWebhook: description: Enable deployment of the validation webhook type: boolean image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string version: description: Version of the image to use type: string required: - image - repository - version type: object ofedDriver: description: |- OFEDDriver is a specialized driver for NVIDIA NICs which can replace the inbox driver that comes with an OS. See https://network.nvidia.com/support/mlnx-ofed-matrix/ properties: certConfig: description: 'Optional: Custom TLS certificates configuration for DOCA driver container' properties: name: description: Name of the ConfigMap type: string type: object containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array env: description: List of environment variables to set in the DOCA driver container. items: description: EnvVar represents an environment variable present in a Container. properties: name: description: Name of the environment variable. Must be a C_IDENTIFIER. type: string value: description: |- Variable references $(VAR_NAME) are expanded using the previously defined environment variables in the container and any service environment variables. If a variable cannot be resolved, the reference in the input string will be unchanged. Double $$ are reduced to a single $, which allows for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)". Escaped references will never be expanded, regardless of whether the variable exists or not. Defaults to "". type: string valueFrom: description: Source for the environment variable's value. Cannot be used if value is not empty. properties: configMapKeyRef: description: Selects a key of a ConfigMap. properties: key: description: The key to select. type: string name: default: "" description: |- Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names type: string optional: description: Specify whether the ConfigMap or its key must be defined type: boolean required: - key type: object x-kubernetes-map-type: atomic fieldRef: description: |- Selects a field of the pod: supports metadata.name, metadata.namespace, `metadata.labels['']`, `metadata.annotations['']`, spec.nodeName, spec.serviceAccountName, status.hostIP, status.podIP, status.podIPs. properties: apiVersion: description: Version of the schema the FieldPath is written in terms of, defaults to "v1". type: string fieldPath: description: Path of the field to select in the specified API version. type: string required: - fieldPath type: object x-kubernetes-map-type: atomic resourceFieldRef: description: |- Selects a resource of the container: only resources limits and requests (limits.cpu, limits.memory, limits.ephemeral-storage, requests.cpu, requests.memory and requests.ephemeral-storage) are currently supported. properties: containerName: description: 'Container name: required for volumes, optional for env vars' type: string divisor: anyOf: - type: integer - type: string description: Specifies the output format of the exposed resources, defaults to "1" pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true resource: description: 'Required: resource to select' type: string required: - resource type: object x-kubernetes-map-type: atomic secretKeyRef: description: Selects a key of a secret in the pod's namespace properties: key: description: The key of the secret to select from. Must be a valid secret key. type: string name: default: "" description: |- Name of the referent. This field is effectively required, but due to backwards compatibility is allowed to be empty. Instances of this type with an empty value here are almost certainly wrong. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names type: string optional: description: Specify whether the Secret or its key must be defined type: boolean required: - key type: object x-kubernetes-map-type: atomic type: object required: - name type: object type: array forcePrecompiled: default: false description: |- ForcePrecompiled specifies if only DOCA driver precompiled images are allowed If set to false and precompiled image does not exists, DOCA driver will be compiled on Nodes If set to true and precompiled image does not exists, OFED state will be Error. type: boolean image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array livenessProbe: description: Pod liveness probe settings properties: initialDelaySeconds: description: Number of seconds after the container has started before the probe is initiated type: integer periodSeconds: description: How often (in seconds) to perform the probe type: integer required: - initialDelaySeconds - periodSeconds type: object readinessProbe: description: Pod readiness probe settings properties: initialDelaySeconds: description: Number of seconds after the container has started before the probe is initiated type: integer periodSeconds: description: How often (in seconds) to perform the probe type: integer required: - initialDelaySeconds - periodSeconds type: object repoConfig: description: 'Optional: Custom package repository configuration for DOCA driver container' properties: name: description: Name of the ConfigMap type: string type: object repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string startupProbe: description: Pod startup probe settings properties: initialDelaySeconds: description: Number of seconds after the container has started before the probe is initiated type: integer periodSeconds: description: How often (in seconds) to perform the probe type: integer required: - initialDelaySeconds - periodSeconds type: object terminationGracePeriodSeconds: default: 300 description: |- TerminationGracePeriodSeconds specifies the length of time in seconds to wait before killing the DOCA driver container pod on termination format: int64 minimum: 0 type: integer upgradePolicy: description: DOCA driver auto-upgrade settings properties: autoUpgrade: default: false description: |- AutoUpgrade is a global switch for automatic upgrade feature if set to false all other options are ignored type: boolean drain: description: The configuration for node drain during automatic upgrade properties: deleteEmptyDir: default: false description: |- DeleteEmptyDir indicates if should continue even if there are pods using emptyDir (local data that will be deleted when the node is drained) type: boolean enable: default: true description: Enable indicates if node draining is allowed during upgrade type: boolean force: default: false description: Force indicates if force draining is allowed type: boolean podSelector: description: |- PodSelector specifies a label selector to filter pods on the node that need to be drained For more details on label selectors, see: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors type: string timeoutSeconds: default: 300 description: TimeoutSecond specifies the length of time in seconds to wait before giving up drain, zero means infinite minimum: 0 type: integer type: object maxParallelUpgrades: default: 1 description: |- MaxParallelUpgrades indicates how many nodes can be upgraded in parallel 0 means no limit, all nodes will be upgraded in parallel minimum: 0 type: integer safeLoad: default: false description: SafeLoad turn on safe driver loading (cordon and drain the node before loading the driver) type: boolean waitForCompletion: description: The configuration for waiting on pods completions properties: podSelector: description: |- PodSelector specifies a label selector for the pods to wait for completion For more details on label selectors, see: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors type: string timeoutSeconds: default: 0 description: |- TimeoutSecond specifies the length of time in seconds to wait before giving up on pod termination, zero means infinite minimum: 0 type: integer type: object type: object version: description: Version of the image to use type: string required: - image - repository - version type: object rdmaSharedDevicePlugin: description: |- RdmaSharedDevicePlugin manages support IB and RoCE HCAs through the Kubernetes device plugin framework. The config field is a json representation of the RDMA shared device plugin configuration. See https://github.com/Mellanox/k8s-rdma-shared-dev-plugin properties: config: description: Configuration for the component as a string type: string containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string useCdi: description: |- Enables use of container device interface (CDI) NOTE: NVIDIA Network Operator does not configure container runtime to enable CDI. type: boolean version: description: Version of the image to use type: string required: - image - repository - version type: object secondaryNetwork: description: |- SecondaryNetwork Specifies components to deploy in order to facilitate a secondary network in Kubernetes. It consists of the following optionally deployed components: - Multus-CNI: Delegate CNI plugin to support secondary networks in Kubernetes - CNI plugins: Currently only containernetworking-plugins is supported - IPAM CNI: Currently only Whereabout IPAM CNI is supported as a part of the secondaryNetwork section. - IPoIB CNI: Allows the user to create IPoIB child link and move it to the pod properties: cniPlugins: description: Image information for CNI plugins properties: containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string version: description: Version of the image to use type: string required: - image - repository - version type: object ipamPlugin: description: Image information for IPAM plugin properties: containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string version: description: Version of the image to use type: string required: - image - repository - version type: object ipoib: description: Image information for IPoIB CNI properties: containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string version: description: Version of the image to use type: string required: - image - repository - version type: object multus: description: Image and configuration information for multus properties: config: description: Configuration for the component as a string type: string containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string version: description: Version of the image to use type: string required: - image - repository - version type: object type: object sriovDevicePlugin: description: |- SriovDevicePlugin manages SRIOV through the Kubernetes device plugin framework. The config field is a json representation of the RDMA shared device plugin configuration. See https://github.com/k8snetworkplumbingwg/sriov-network-device-plugin properties: config: description: Configuration for the component as a string type: string containerResources: description: ResourceRequirements describes the compute resource requirements items: description: ResourceRequirements describes the compute resource requirements. properties: limits: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Limits describes the maximum amount of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object name: description: Name of the container the requirements are set for type: string requests: additionalProperties: anyOf: - type: integer - type: string pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$ x-kubernetes-int-or-string: true description: |- Requests describes the minimum amount of compute resources required. If Requests is omitted for a container, it defaults to Limits if that is explicitly specified, otherwise to an implementation-defined value. Requests cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/ type: object required: - name type: object type: array image: description: Name of the image pattern: '[a-zA-Z0-9\-]+' type: string imagePullSecrets: default: [] description: |- ImagePullSecrets is an optional list of references to secrets in the same namespace to use for pulling the image items: type: string type: array repository: description: Address of the registry that stores the image pattern: '[a-zA-Z0-9\.\-\/]+' type: string useCdi: description: |- Enables use of container device interface (CDI) NOTE: NVIDIA Network Operator does not configure container runtime to enable CDI. type: boolean version: description: Version of the image to use type: string required: - image - repository - version type: object tolerations: description: Tolerations to inject to the DaemonSets objects that are managed by the operator items: description: |- The pod this Toleration is attached to tolerates any taint that matches the triple using the matching operator . properties: effect: description: |- Effect indicates the taint effect to match. Empty means match all taint effects. When specified, allowed values are NoSchedule, PreferNoSchedule and NoExecute. type: string key: description: |- Key is the taint key that the toleration applies to. Empty means match all taint keys. If the key is empty, operator must be Exists; this combination means to match all values and all keys. type: string operator: description: |- Operator represents a key's relationship to the value. Valid operators are Exists and Equal. Defaults to Equal. Exists is equivalent to wildcard for value, so that a pod can tolerate all taints of a particular category. type: string tolerationSeconds: description: |- TolerationSeconds represents the period of time the toleration (which must be of effect NoExecute, otherwise this field is ignored) tolerates the taint. By default, it is not set, which means tolerate the taint forever (do not evict). Zero and negative values will be treated as 0 (evict immediately) by the system. format: int64 type: integer value: description: |- Value is the taint value the toleration matches to. If the operator is Exists, the value should be empty, otherwise just a regular string. type: string type: object type: array type: object status: description: Defines the observed state of NicClusterPolicy properties: appliedStates: description: AppliedStates provide a finer view of the observed state items: description: AppliedState defines a finer-grained view of the observed state of NicClusterPolicy properties: message: description: |- Message is a human readable message indicating details about why the state is in this condition type: string name: description: Name of the deployed component this state refers to type: string state: description: The state of the deployed component. ("ready", "notReady", "ignore", "error") enum: - ready - notReady - ignore - error type: string required: - name - state type: object type: array reason: description: Informative string in case the observed state is error type: string state: description: Reflects the current state of the cluster policy enum: - ignore - notReady - ready - error type: string required: - state type: object type: object served: true storage: true subresources: status: {}