diff --git a/Makefile b/Makefile index 90f440d9a..307a77a81 100644 --- a/Makefile +++ b/Makefile @@ -420,7 +420,7 @@ bundle-build: operator-sdk manifests kustomize ## OpenShift Build OLM bundle. cd config/manager && $(KUSTOMIZE) edit set image controller=$(IMG) cd config/manager-base && $(KUSTOMIZE) edit set image controller=$(IMG) OPERATOR_SDK="${OPERATOR_SDK}" \ - BUNDLE_GEN_FLAGS="${BUNDLE_GEN_FLAGS} --extra-service-accounts amd-gpu-operator-kmm-device-plugin,amd-gpu-operator-kmm-module-loader,amd-gpu-operator-node-labeller,amd-gpu-operator-metrics-exporter,amd-gpu-operator-metrics-exporter-rbac-proxy,amd-gpu-operator-test-runner,amd-gpu-operator-config-manager,amd-gpu-operator-utils-container" \ + BUNDLE_GEN_FLAGS="${BUNDLE_GEN_FLAGS} --extra-service-accounts amd-gpu-operator-kmm-device-plugin,amd-gpu-operator-kmm-module-loader,amd-gpu-operator-node-labeller,amd-gpu-operator-metrics-exporter,amd-gpu-operator-metrics-exporter-rbac-proxy,amd-gpu-operator-test-runner,amd-gpu-operator-config-manager,amd-gpu-operator-utils-container,amd-gpu-operator-dra-driver" \ PKG=amd-gpu-operator \ SOURCE_DIR=$(dir $(realpath $(lastword $(MAKEFILE_LIST)))) \ KUBECTL_CMD=${KUBECTL_CMD} ./hack/generate-bundle diff --git a/bundle/manifests/amd-gpu-operator.clusterserviceversion.yaml b/bundle/manifests/amd-gpu-operator.clusterserviceversion.yaml index a627341a4..b21690a60 100644 --- a/bundle/manifests/amd-gpu-operator.clusterserviceversion.yaml +++ b/bundle/manifests/amd-gpu-operator.clusterserviceversion.yaml @@ -35,8 +35,8 @@ metadata: ] capabilities: Seamless Upgrades categories: AI/Machine Learning,Monitoring - containerImage: docker.io/rocm/amd-gpu-operator:dev - createdAt: "2026-04-02T12:26:30Z" + containerImage: registry.test.pensando.io:5000/amd-gpu-operator:dev + createdAt: "2026-04-15T18:57:11Z" description: |- Operator responsible for deploying AMD GPU kernel drivers, device plugin, device test runner and device metrics exporter For more information, visit [documentation](https://instinct.docs.amd.com/projects/gpu-operator/en/latest/) @@ -1335,6 +1335,40 @@ spec: - list - watch serviceAccountName: amd-gpu-operator-controller-manager + - rules: + - apiGroups: + - security.openshift.io + resourceNames: + - privileged + resources: + - securitycontextconstraints + verbs: + - use + - apiGroups: + - resource.k8s.io + resources: + - resourceslices + verbs: + - get + - list + - watch + - create + - update + - patch + - delete + - apiGroups: + - resource.k8s.io + resources: + - resourceclaims + verbs: + - get + - apiGroups: + - "" + resources: + - nodes + verbs: + - get + serviceAccountName: amd-gpu-operator-dra-driver - rules: - apiGroups: - "" diff --git a/config/rbac/dra_driver_cluster_role.yaml b/config/rbac/dra_driver_cluster_role.yaml new file mode 100644 index 000000000..5f2069856 --- /dev/null +++ b/config/rbac/dra_driver_cluster_role.yaml @@ -0,0 +1,37 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: dra-driver +rules: +- apiGroups: + - security.openshift.io + resourceNames: + - privileged + resources: + - securitycontextconstraints + verbs: + - use +- apiGroups: + - resource.k8s.io + resources: + - resourceslices + verbs: + - get + - list + - watch + - create + - update + - patch + - delete +- apiGroups: + - resource.k8s.io + resources: + - resourceclaims + verbs: + - get +- apiGroups: + - "" + resources: + - nodes + verbs: + - get diff --git a/config/rbac/dra_driver_role_binding.yaml b/config/rbac/dra_driver_role_binding.yaml new file mode 100644 index 000000000..749abbfea --- /dev/null +++ b/config/rbac/dra_driver_role_binding.yaml @@ -0,0 +1,11 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: dra-driver +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: dra-driver +subjects: +- kind: ServiceAccount + name: dra-driver diff --git a/config/rbac/dra_driver_service_account.yaml b/config/rbac/dra_driver_service_account.yaml new file mode 100644 index 000000000..8d8e8d541 --- /dev/null +++ b/config/rbac/dra_driver_service_account.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: dra-driver diff --git a/config/rbac/kustomization.yaml b/config/rbac/kustomization.yaml index 126da4b4b..afa25968b 100644 --- a/config/rbac/kustomization.yaml +++ b/config/rbac/kustomization.yaml @@ -28,5 +28,8 @@ resources: - config_manager_role.yaml - config_manager_role_binding.yaml - config_manager_service_account.yaml + - dra_driver_service_account.yaml + - dra_driver_cluster_role.yaml + - dra_driver_role_binding.yaml - openshift-monitoring-role.yaml - openshift-monitoring-rolebinding.yaml \ No newline at end of file