NVIDIA / k8s-dra-driver

Dynamic Resource Allocation (DRA) for NVIDIA GPUs in Kubernetes
Apache License 2.0
212 stars 38 forks source link

Let kublet plugin run privileged on OpenShift #76

Closed empovit closed 5 months ago

empovit commented 6 months ago

On OpenShift, the kublet plugin container won't run without applying the right security settings that let it run privileged. We solve this by binding the privileged security context constraints (SCC) role to the DRA driver's service account.

This is done only when the target system has the OpenShift SCC capability in order to minimise the impact on non-OpenShift platforms.