Skip to content

Commit cb729f1

Browse files
authored
Merge pull request #1160 from chaitanya1731/ocp-quickstart
Added ocp_quickstart_guide for OCP users
2 parents b6a5d5b + 084bf53 commit cb729f1

File tree

5 files changed

+69
-4
lines changed

5 files changed

+69
-4
lines changed

README.md

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -201,10 +201,9 @@ Intel SGX device plugins. Each device plugin has its own custom resource
201201
definition (CRD) and the corresponding controller that watches CRUD operations
202202
to those custom resources.
203203

204-
The [Device plugins operator README](cmd/operator/README.md) gives the
205-
installation and usage details. The operator is also available via
206-
[operatorhub.io](https://operatorhub.io/operator/intel-device-plugins-operator)
207-
and on Red Hat OpenShift Container Platform.
204+
The [Device plugins operator README](cmd/operator/README.md) gives the installation and usage details for the community operator available on [operatorhub.io](https://operatorhub.io/operator/intel-device-plugins-operator).
205+
206+
The [Device plugins Operator for OCP](cmd/operator/ocp_quickstart_guide/README.md) gives the installation and usage details for the operator available on [Red Hat OpenShift Container Platform](https://catalog.redhat.com/software/operators/detail/61e9f2d7b9cdd99018fc5736).
208207

209208
## Demos
210209

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
# Intel® Device Plugins Operator for Red Hat OpenShift Container Platform
2+
3+
## Table of Contents
4+
* [Introduction](#introduction)
5+
* [Minimum Hardware Requirements](#minimum-hardware-requirements)
6+
* [Intel SGX Enabled Server](#intel-sgx-enabled-server)
7+
* [Installation](#installation)
8+
* [Prerequisites](#prerequisites)
9+
* [Install Operator using OpenShift Web Console](#install-operator-using-openshift-web-console)
10+
* [Verify Operator installation](#verify-operator-installation)
11+
* [Deploying Intel Device Plugins](#deploying-intel-device-plugins)
12+
* [Intel SGX Device Plugin](#intel-sgx-device-plugin)
13+
14+
## Introduction
15+
The Intel Device Plugins Operator for OpenShift Container Platform is a collection of device plugins advertising Intel specific hardware resources to the kubelet. It provides a single point of control for Intel® Software Guard Extensions (Intel® SGX), Intel GPUs, Intel® QuickAccess Technology (Intel® QAT), Intel® Data Streaming Accelerator (Intel® DSA), and Intel® In-Memory Analytics Accelerator (Intel® IAA) devices to cluster administrators. The [`v0.24.0`](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/tag/v0.24.0) release of the operator only supports Intel SGX and Intel QAT device plugins. GPU, Intel DSA, Intel IAA, and other device plugins will be supported in future releases.
16+
17+
## Minimum Hardware Requirements
18+
### Intel SGX Enabled Server
19+
- Third Generation Intel® Xeon® Scalable Platform, code-named “Ice Lake” or later
20+
- Configure BIOS using below details
21+
![SGX Server BIOS](images/SGX-BIOS.PNG)
22+
[**Note:** The BIOS configuration shown above is just for the reference. Please contact your BIOS vendor for details]
23+
24+
## Installation
25+
### Prerequisites
26+
- Make sure Red Hat OpenShift Cluster is ready to use and the developing machine is RHEL and `oc` command is installed and configured properly. Please note that the following operation is verified on Red Hat OpenShift Cluster 4.11 and working machine RHEL-8.6
27+
- Install the `oc` command to your development machine
28+
- Follow the [link](https://docs.openshift.com/container-platform/4.11/hardware_enablement/psap-node-feature-discovery-operator.html) to install **NFD operator** (if it's not already installed).
29+
**Note:** Please only install the NFD operator and use steps below to create the NodeFeatureDiscovery instance.
30+
- Create the NodeFeatureDiscovery instance
31+
```
32+
$ oc apply -f https://raw.githubusercontent.com/intel/intel-device-plugins-for-kubernetes/v0.24.0/deployments/nfd/overlays/node-feature-discovery/node-feature-discovery-openshift.yaml
33+
```
34+
- Create the NodeFeatureRule instance
35+
```
36+
$ oc apply -f https://raw.githubusercontent.com/intel/intel-device-plugins-for-kubernetes/v0.24.0/deployments/nfd/overlays/node-feature-rules/node-feature-rules-openshift.yaml
37+
```
38+
- Deploy SELinux Policy for OCP 4.10 -
39+
The SGX device plugin and Init container run as a label `container_device_plugin_t` and `container_device_plugin_init_t` respectively. This requires a custom SELinux policy to be deployed before the SGX plugin can be run. To deploy this policy, run
40+
```
41+
$ oc apply -f https://raw.githubusercontent.com/intel/user-container-selinux/main/policy-deployment.yaml
42+
```
43+
44+
### Install Operator using OpenShift Web Console
45+
1. In OpenShift web console navigate to **Operator** -> **OperatorHub**
46+
2. Search for **Intel Device Plugins Operator ->** Click **Install**
47+
<img src="images/operator.PNG" width="300" height="200">
48+
49+
### Verify Operator installation
50+
1. Go to **Operator** -> **Installed Operators**
51+
2. Verify the status of operator as **Succeeded**
52+
3. Click **Intel Device Plugins Operator** to view the details
53+
![Verify Operator](images/verify-operator.PNG)
54+
55+
56+
## Deploying Intel Device Plugins
57+
58+
### Intel SGX Device Plugin
59+
Follow the steps below to deploy Intel SGX Device Plugin Custom Resource
60+
1. Go to **Operator** -> **Installed Operators**
61+
2. Open **Intel Device Plugins Operator**
62+
3. Navigate to tab **Intel Software Guard Extensions Device Plugin**
63+
4. Click **Create SgxDevicePlugin ->** set correct parameters -> Click **Create**
64+
OR for any customizations, please select `YAML view` and edit details. Once done, click **Create**
65+
5. Verify CR by checking the status of DaemonSet **`intel-sgx-plugin`**
66+
6. Now `SgxDevicePlugin` is ready to deploy any workloads
100 KB
Loading
6.84 KB
Loading
13 KB
Loading

0 commit comments

Comments
 (0)