feat(helm): update intel-device-plugins group ( 0.30.0 → 0.31.0 ) (minor)

[bot-ross[bot]]

This PR contains the following updates:

Package	Update	Change
intel-device-plugins-gpu	minor	0.30.0 -> 0.31.0
intel-device-plugins-operator	minor	0.30.0 -> 0.31.0

---

Release Notes

intel/helm-charts (intel-device-plugins-gpu)

### [`v0.31.0`](https://redirect.github.com/intel/helm-charts/releases/tag/intel-device-plugins-gpu-0.31.0) [Compare Source](https://redirect.github.com/intel/helm-charts/compare/intel-device-plugins-gpu-0.30.0...intel-device-plugins-gpu-0.31.0) A Helm chart for Intel GPU Device Plugin

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[bot-ross[bot]]

--- kubernetes/main/apps/kube-system/intel-device-plugin/app Kustomization: flux-system/intel-device-plugin HelmRelease: kube-system/intel-device-plugin-operator

+++ kubernetes/main/apps/kube-system/intel-device-plugin/app Kustomization: flux-system/intel-device-plugin HelmRelease: kube-system/intel-device-plugin-operator

@@ -13,13 +13,13 @@

     spec:
       chart: intel-device-plugins-operator
       sourceRef:
         kind: HelmRepository
         name: intel
         namespace: flux-system
-      version: 0.30.0
+      version: 0.31.0
   dependsOn:
   - name: node-feature-discovery
     namespace: kube-system
   install:
     crds: CreateReplace
     remediation:
--- kubernetes/main/apps/kube-system/intel-device-plugin/gpu Kustomization: flux-system/intel-device-plugin-gpu HelmRelease: kube-system/intel-device-plugin-gpu

+++ kubernetes/main/apps/kube-system/intel-device-plugin/gpu Kustomization: flux-system/intel-device-plugin-gpu HelmRelease: kube-system/intel-device-plugin-gpu

@@ -13,13 +13,13 @@

     spec:
       chart: intel-device-plugins-gpu
       sourceRef:
         kind: HelmRepository
         name: intel
         namespace: flux-system
-      version: 0.30.0
+      version: 0.31.0
   dependsOn:
   - name: intel-device-plugin-operator
     namespace: kube-system
   install:
     remediation:
       retries: 3

[bot-ross[bot]]

--- HelmRelease: kube-system/intel-device-plugin-gpu GpuDevicePlugin: kube-system/intel-gpu-plugin

+++ HelmRelease: kube-system/intel-device-plugin-gpu GpuDevicePlugin: kube-system/intel-gpu-plugin

@@ -1,13 +1,13 @@

 ---
 apiVersion: deviceplugin.intel.com/v1
 kind: GpuDevicePlugin
 metadata:
   name: intel-gpu-plugin
 spec:
-  image: intel/intel-gpu-plugin:0.30.0
+  image: intel/intel-gpu-plugin:0.31.0
   logLevel: 2
   sharedDevNum: 3
   resourceManager: false
   enableMonitoring: true
   preferredAllocationPolicy: none
   nodeSelector:
--- HelmRelease: kube-system/intel-device-plugin-operator ClusterRole: kube-system/inteldeviceplugins-manager-role

+++ HelmRelease: kube-system/intel-device-plugin-operator ClusterRole: kube-system/inteldeviceplugins-manager-role

@@ -2,12 +2,19 @@

 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   creationTimestamp: null
   name: inteldeviceplugins-manager-role
 rules:
+- apiGroups:
+  - ''
+  resources:
+  - nodes/proxy
+  verbs:
+  - get
+  - list
 - apiGroups:
   - ''
   resources:
   - pods
   verbs:
   - get
@@ -51,179 +58,47 @@

   - get
   - update
 - apiGroups:
   - deviceplugin.intel.com
   resources:
   - dlbdeviceplugins
+  - dsadeviceplugins
+  - fpgadeviceplugins
+  - gpudeviceplugins
+  - iaadeviceplugins
+  - qatdeviceplugins
+  - sgxdeviceplugins
   verbs:
   - create
   - delete
   - get
   - list
   - patch
   - update
   - watch
 - apiGroups:
   - deviceplugin.intel.com
   resources:
   - dlbdeviceplugins/finalizers
+  - dsadeviceplugins/finalizers
+  - fpgadeviceplugins/finalizers
+  - gpudeviceplugins/finalizers
+  - iaadeviceplugins/finalizers
+  - qatdeviceplugins/finalizers
+  - sgxdeviceplugins/finalizers
   verbs:
   - update
 - apiGroups:
   - deviceplugin.intel.com
   resources:
   - dlbdeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - dsadeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - dsadeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - dsadeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - fpgadeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - fpgadeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - fpgadeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - gpudeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - gpudeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - gpudeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - iaadeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - iaadeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - qatdeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - qatdeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - qatdeviceplugins/status
-  verbs:
-  - get
-  - patch
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - sgxdeviceplugins
-  verbs:
-  - create
-  - delete
-  - get
-  - list
-  - patch
-  - update
-  - watch
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
-  - sgxdeviceplugins/finalizers
-  verbs:
-  - update
-- apiGroups:
-  - deviceplugin.intel.com
-  resources:
   - sgxdeviceplugins/status
   verbs:
   - get
   - patch
   - update
 - apiGroups:
--- HelmRelease: kube-system/intel-device-plugin-operator Deployment: kube-system/inteldeviceplugins-controller-manager

+++ HelmRelease: kube-system/intel-device-plugin-operator Deployment: kube-system/inteldeviceplugins-controller-manager

@@ -20,13 +20,13 @@

       - args: null
         env:
         - name: DEVICEPLUGIN_NAMESPACE
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
-        image: intel/intel-deviceplugin-operator:0.30.0
+        image: intel/intel-deviceplugin-operator:0.31.0
         imagePullPolicy: IfNotPresent
         name: manager
         ports:
         - containerPort: 9443
           name: webhook-server
           protocol: TCP
@@ -53,15 +53,15 @@

           name: cert
           readOnly: true
       - args:
         - --secure-listen-address=0.0.0.0:8443
         - --upstream=http://127.0.0.1:8080/
         - --logtostderr=true
-        - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+        - --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
         - --v=10
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.16.0
+        image: quay.io/brancz/kube-rbac-proxy:v0.18.1
         name: kube-rbac-proxy
         ports:
         - containerPort: 8443
           name: https
         securityContext:
           allowPrivilegeEscalation: false