k8snetworkplumbingwg / sriov-network-operator

Operator for provisioning and configuring SR-IOV CNI plugin and device plugin
Apache License 2.0
85 stars 114 forks source link

Check for kernel lockdown only in mlx plugin #670

Closed SchSeba closed 8 months ago

SchSeba commented 8 months ago

We need to check for the kernel lockdown only in the mlx plugin.

if the firmware in the mlx card is already configured as needed we can allocate virtual functions even if the system is in lockdown

github-actions[bot] commented 8 months ago

Thanks for your PR, To run vendors CIs use one of:

coveralls commented 8 months ago

Pull Request Test Coverage Report for Build 8506776095

Details


Files with Coverage Reduction New Missed Lines %
pkg/host/mock/mock_host.go 10 31.44%
<!-- Total: 10 -->
Totals Coverage Status
Change from base Build 8467233545: -0.02%
Covered Lines: 4794
Relevant Lines: 12509

💛 - Coveralls
SchSeba commented 8 months ago

@e0ne @ykulazhenkov please take a look this can be a way to make the sriov-operator work with mlx cards in secure mode.

in general the idea is

  1. the user configure the max number of vfs he wants in the firmware as part of the installation process (not secure boot)
  2. switch the system to secure boot
  3. install the operator with disablePlugin option for mlx
  4. create the sriovNetworkNodePolicy as always