Release notes

Highlights

The release adds an initial version of DLB initcontainer for device provisioning. The documentation has been been improved and automated end-to-end validation coverage has been improved.

Note: In #850 we dropped the deprecated /dev/sgx/ hostpath mount which made the udev created symlinks to /dev/sgx_* device nodes available to containers. Thise the first release without the automatic backwards compatibility. Containers that still require these symlinks and know that they are installed on hosts they run can manually add the hostpath volume mounts.

Generic

• Upgraded Kubernetes API to v1.25 level (#1131).
• Improved documentation especially in the areas of developer documentation and GPUs.
• Helm charts are now supported but maintained in intel/helm-charts.

Images

• Updated Golang build images to Go 1.19 (#1093).
• Scanned Dockerfiles using Hadolint and mitigated all errors and most warnings (#1201).
• Improved the Dockerfile maintenance by making them auto-generated (#1013).

Operator

• Configured webhooks' TLS Min version to 1.3 and added a TLS configuration e2e test case (#1054).
• Updated operator command line parameters to be consistent with the kubebuilder v3 set (#1055).
• Fixed RBAC rules for LeaderElection (#1155).

GPU

• Deprecated debugfs GPU IP block version labels in NFD hook doc (#1115).

SGX

• Dropped the deprecated /dev/sgx/ hostpath mounts (#850).
• Added a workaround to kubelet TopologyHints admission error (#1141).

DSA

• IDXD: Dropped unused sysfs parameter (#1048).

IAA

• IDXD: Dropped unused sysfs parameter (#1048).

FPGA

• Fixed NFD labeling rules (#1070).

QAT

• Added support for reading crypto and compression capabilities from sysfs on QAT Gen4 platforms (#1134).

VPU

• No updates.

DLB

• Added an initial version of DLB initcontainer for device provisioning (#1088).