Update efa device plugin daemonset config (#1245)

* Update efa plugin config

* update image tag

* update readme

* update readme

Author: Pavani-Panakanti

stable/aws-efa-k8s-device-plugin/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 name: aws-efa-k8s-device-plugin
 description: A Helm chart for EFA device plugin.
-version: v0.5.15
-appVersion: "v0.5.8"
+version: v0.5.16
+appVersion: "v0.5.9"
 home: https://github.com/aws/eks-charts
 icon: https://raw.githubusercontent.com/aws/eks-charts/master/docs/logo/aws.png
 sources:

stable/aws-efa-k8s-device-plugin/README.md

@@ -23,8 +23,7 @@ Parameter | Description | Default
 --- | --- | ---
 `image.repository` | EFA image repository | `602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/aws-efa-k8s-device-plugin`
 `image.tag` | EFA image tag | `v0.5.8`
-`securityContext.allowPrivilegeEscalation` | Controls whether a process can gain more privilege than its parent process | `false`
-`securityContext` | EFA plugin security context | `capabilities: drop: ["ALL"] runAsNonRoot: false`
+`securityContext` | EFA plugin security context | `allowPrivilegeEscalation: true, privileged: true, runAsNonRoot: false, runAsUser: 0`
 `supportedInstanceLabels.keys` | Kubernetes key to interpret as instance type | `nodes.kubernetes.io/instance-type`
 `supportedInstanceLabels.values` | List of instances which currently support EFA devices | `see https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html#efa-instance-types`
 `resources` | Resources for containers in pod | `requests.cpu: 10m requests.memory: 20Mi`

stable/aws-efa-k8s-device-plugin/templates/daemonset.yaml

@@ -74,10 +74,16 @@ spec:
               mountPath: /var/lib/kubelet/device-plugins
             - name: infiniband-volume
               mountPath: /dev/infiniband/
+            - name: neuron-tools
+              mountPath: /opt/aws/neuron/
       volumes:
         - name: device-plugin
           hostPath:
             path: /var/lib/kubelet/device-plugins
         - name: infiniband-volume
           hostPath:
-            path: /dev/infiniband/
+            path: /dev/infiniband/
+        - name: neuron-tools
+          hostPath:
+            path: /opt/aws/neuron/
+            type: DirectoryOrCreate

stable/aws-efa-k8s-device-plugin/values.yaml

@@ -1,12 +1,12 @@
 image:
   repository: 602401143452.dkr.ecr.us-west-2.amazonaws.com/eks/aws-efa-k8s-device-plugin
   # Overrides the image tag whose default is the chart appVersion.
-  tag: "v0.5.8"
+  tag: "v0.5.9"
 securityContext:
-  allowPrivilegeEscalation: false
-  capabilities:
-    drop: ["ALL"]
+  allowPrivilegeEscalation: true
+  privileged: true
   runAsNonRoot: false
+  runAsUser: 0
 supportedInstanceLabels: # EFA supported instances: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/efa.html#efa-instance-types
   keys:
     - "node.kubernetes.io/instance-type"