mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-02 07:34:45 +08:00
Drew NewberryandEvan Lezar
40f822906c
* feat(compute): add standalone first-party drivers Build Docker, Podman, Kubernetes, and VM drivers as external binaries and exercise each through the public compute-driver API. Keep the external E2E setup complete at introduction, including VM image selection, Kubernetes post-renderer isolation, supervisor reuse, and scoped Podman coverage. External Kubernetes endpoints support shared and managed workspace modes. Operator mode remains restricted to the in-process driver because gateway authentication and the driver must share a dynamic namespace allowlist. Signed-off-by: Drew Newberry <anewberry@nvidia.com> * ci(e2e): run managed and external drivers independently Signed-off-by: Drew Newberry <anewberry@nvidia.com> * test(compute): cover external driver socket contract Signed-off-by: Evan Lezar <elezar@nvidia.com> * ci(e2e): install bundled Z3 build dependency Signed-off-by: Drew Newberry <anewberry@nvidia.com> * fix(server): gate in-tree driver tracing Signed-off-by: Drew Newberry <anewberry@nvidia.com> --------- Signed-off-by: Drew Newberry <anewberry@nvidia.com> Signed-off-by: Evan Lezar <elezar@nvidia.com> Co-authored-by: Evan Lezar <elezar@nvidia.com>
38 lines
1.1 KiB
YAML
38 lines
1.1 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
apiVersion: apps/v1
|
|
kind: StatefulSet
|
|
metadata:
|
|
name: openshell
|
|
spec:
|
|
template:
|
|
spec:
|
|
containers:
|
|
- name: openshell-gateway
|
|
volumeMounts:
|
|
- name: compute-driver-socket
|
|
mountPath: /var/run/openshell-compute
|
|
- name: kubernetes-compute-driver
|
|
image: replaced-by-kustomize
|
|
imagePullPolicy: IfNotPresent
|
|
command:
|
|
- /usr/local/bin/openshell-driver-kubernetes
|
|
args:
|
|
- --bind-socket
|
|
- /var/run/openshell-compute/driver/driver.sock
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
runAsUser: 1000
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
volumeMounts:
|
|
- name: compute-driver-socket
|
|
mountPath: /var/run/openshell-compute
|
|
resources: {}
|
|
volumes:
|
|
- name: compute-driver-socket
|
|
emptyDir: {}
|