
We want to make the return type of the GetDevices() method of the podresources DevicesProvider interface consistent with the newly added GetAllocatableDevices type. This makes the code easier to read and reduces the coupling between the podresourcesapi server and the devicemanager code. No intended changes in behaviour, but the different return types now requires some data massaging. Tests are updated accordingly. Signed-off-by: Francesco Romani <fromani@redhat.com>
384 lines
12 KiB
Go
384 lines
12 KiB
Go
/*
|
|
Copyright 2017 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package devicemanager
|
|
|
|
import (
|
|
"sync"
|
|
|
|
"k8s.io/klog/v2"
|
|
|
|
"k8s.io/apimachinery/pkg/util/sets"
|
|
pluginapi "k8s.io/kubelet/pkg/apis/deviceplugin/v1beta1"
|
|
"k8s.io/kubernetes/pkg/kubelet/cm/devicemanager/checkpoint"
|
|
kubecontainer "k8s.io/kubernetes/pkg/kubelet/container"
|
|
)
|
|
|
|
type deviceAllocateInfo struct {
|
|
// deviceIds contains device Ids allocated to this container for the given resourceName.
|
|
deviceIds checkpoint.DevicesPerNUMA
|
|
// allocResp contains cached rpc AllocateResponse.
|
|
allocResp *pluginapi.ContainerAllocateResponse
|
|
}
|
|
|
|
type resourceAllocateInfo map[string]deviceAllocateInfo // Keyed by resourceName.
|
|
type containerDevices map[string]resourceAllocateInfo // Keyed by containerName.
|
|
type podDevices struct {
|
|
sync.RWMutex
|
|
devs map[string]containerDevices // Keyed by podUID.
|
|
}
|
|
|
|
// NewPodDevices is a function that returns object of podDevices type with its own guard
|
|
// RWMutex and a map where key is a pod UID and value contains
|
|
// container devices information of type containerDevices.
|
|
func newPodDevices() *podDevices {
|
|
return &podDevices{devs: make(map[string]containerDevices)}
|
|
}
|
|
|
|
func (pdev *podDevices) pods() sets.String {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
ret := sets.NewString()
|
|
for k := range pdev.devs {
|
|
ret.Insert(k)
|
|
}
|
|
return ret
|
|
}
|
|
|
|
func (pdev *podDevices) size() int {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
return len(pdev.devs)
|
|
}
|
|
|
|
func (pdev *podDevices) hasPod(podUID string) bool {
|
|
_, podExists := pdev.devs[podUID]
|
|
return podExists
|
|
}
|
|
|
|
func (pdev *podDevices) insert(podUID, contName, resource string, devices checkpoint.DevicesPerNUMA, resp *pluginapi.ContainerAllocateResponse) {
|
|
pdev.Lock()
|
|
defer pdev.Unlock()
|
|
if _, podExists := pdev.devs[podUID]; !podExists {
|
|
pdev.devs[podUID] = make(containerDevices)
|
|
}
|
|
if _, contExists := pdev.devs[podUID][contName]; !contExists {
|
|
pdev.devs[podUID][contName] = make(resourceAllocateInfo)
|
|
}
|
|
pdev.devs[podUID][contName][resource] = deviceAllocateInfo{
|
|
deviceIds: devices,
|
|
allocResp: resp,
|
|
}
|
|
}
|
|
|
|
func (pdev *podDevices) delete(pods []string) {
|
|
pdev.Lock()
|
|
defer pdev.Unlock()
|
|
for _, uid := range pods {
|
|
delete(pdev.devs, uid)
|
|
}
|
|
}
|
|
|
|
// Returns list of device Ids allocated to the given pod for the given resource.
|
|
// Returns nil if we don't have cached state for the given <podUID, resource>.
|
|
func (pdev *podDevices) podDevices(podUID, resource string) sets.String {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
|
|
ret := sets.NewString()
|
|
for contName := range pdev.devs[podUID] {
|
|
ret = ret.Union(pdev.containerDevices(podUID, contName, resource))
|
|
}
|
|
return ret
|
|
}
|
|
|
|
// Returns list of device Ids allocated to the given container for the given resource.
|
|
// Returns nil if we don't have cached state for the given <podUID, contName, resource>.
|
|
func (pdev *podDevices) containerDevices(podUID, contName, resource string) sets.String {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
if _, podExists := pdev.devs[podUID]; !podExists {
|
|
return nil
|
|
}
|
|
if _, contExists := pdev.devs[podUID][contName]; !contExists {
|
|
return nil
|
|
}
|
|
devs, resourceExists := pdev.devs[podUID][contName][resource]
|
|
if !resourceExists {
|
|
return nil
|
|
}
|
|
return devs.deviceIds.Devices()
|
|
}
|
|
|
|
// Populates allocatedResources with the device resources allocated to the specified <podUID, contName>.
|
|
func (pdev *podDevices) addContainerAllocatedResources(podUID, contName string, allocatedResources map[string]sets.String) {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
containers, exists := pdev.devs[podUID]
|
|
if !exists {
|
|
return
|
|
}
|
|
resources, exists := containers[contName]
|
|
if !exists {
|
|
return
|
|
}
|
|
for resource, devices := range resources {
|
|
allocatedResources[resource] = allocatedResources[resource].Union(devices.deviceIds.Devices())
|
|
}
|
|
}
|
|
|
|
// Removes the device resources allocated to the specified <podUID, contName> from allocatedResources.
|
|
func (pdev *podDevices) removeContainerAllocatedResources(podUID, contName string, allocatedResources map[string]sets.String) {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
containers, exists := pdev.devs[podUID]
|
|
if !exists {
|
|
return
|
|
}
|
|
resources, exists := containers[contName]
|
|
if !exists {
|
|
return
|
|
}
|
|
for resource, devices := range resources {
|
|
allocatedResources[resource] = allocatedResources[resource].Difference(devices.deviceIds.Devices())
|
|
}
|
|
}
|
|
|
|
// Returns all of devices allocated to the pods being tracked, keyed by resourceName.
|
|
func (pdev *podDevices) devices() map[string]sets.String {
|
|
ret := make(map[string]sets.String)
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
for _, containerDevices := range pdev.devs {
|
|
for _, resources := range containerDevices {
|
|
for resource, devices := range resources {
|
|
if _, exists := ret[resource]; !exists {
|
|
ret[resource] = sets.NewString()
|
|
}
|
|
if devices.allocResp != nil {
|
|
ret[resource] = ret[resource].Union(devices.deviceIds.Devices())
|
|
}
|
|
}
|
|
}
|
|
}
|
|
return ret
|
|
}
|
|
|
|
// Turns podDevices to checkpointData.
|
|
func (pdev *podDevices) toCheckpointData() []checkpoint.PodDevicesEntry {
|
|
var data []checkpoint.PodDevicesEntry
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
for podUID, containerDevices := range pdev.devs {
|
|
for conName, resources := range containerDevices {
|
|
for resource, devices := range resources {
|
|
if devices.allocResp == nil {
|
|
klog.Errorf("Can't marshal allocResp for %v %v %v: allocation response is missing", podUID, conName, resource)
|
|
continue
|
|
}
|
|
|
|
allocResp, err := devices.allocResp.Marshal()
|
|
if err != nil {
|
|
klog.Errorf("Can't marshal allocResp for %v %v %v: %v", podUID, conName, resource, err)
|
|
continue
|
|
}
|
|
data = append(data, checkpoint.PodDevicesEntry{
|
|
PodUID: podUID,
|
|
ContainerName: conName,
|
|
ResourceName: resource,
|
|
DeviceIDs: devices.deviceIds,
|
|
AllocResp: allocResp})
|
|
}
|
|
}
|
|
}
|
|
return data
|
|
}
|
|
|
|
// Populates podDevices from the passed in checkpointData.
|
|
func (pdev *podDevices) fromCheckpointData(data []checkpoint.PodDevicesEntry) {
|
|
for _, entry := range data {
|
|
klog.V(2).Infof("Get checkpoint entry: %v %v %v %v %v\n",
|
|
entry.PodUID, entry.ContainerName, entry.ResourceName, entry.DeviceIDs, entry.AllocResp)
|
|
allocResp := &pluginapi.ContainerAllocateResponse{}
|
|
err := allocResp.Unmarshal(entry.AllocResp)
|
|
if err != nil {
|
|
klog.Errorf("Can't unmarshal allocResp for %v %v %v: %v", entry.PodUID, entry.ContainerName, entry.ResourceName, err)
|
|
continue
|
|
}
|
|
pdev.insert(entry.PodUID, entry.ContainerName, entry.ResourceName, entry.DeviceIDs, allocResp)
|
|
}
|
|
}
|
|
|
|
// Returns combined container runtime settings to consume the container's allocated devices.
|
|
func (pdev *podDevices) deviceRunContainerOptions(podUID, contName string) *DeviceRunContainerOptions {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
|
|
containers, exists := pdev.devs[podUID]
|
|
if !exists {
|
|
return nil
|
|
}
|
|
resources, exists := containers[contName]
|
|
if !exists {
|
|
return nil
|
|
}
|
|
opts := &DeviceRunContainerOptions{}
|
|
// Maps to detect duplicate settings.
|
|
devsMap := make(map[string]string)
|
|
mountsMap := make(map[string]string)
|
|
envsMap := make(map[string]string)
|
|
annotationsMap := make(map[string]string)
|
|
// Loops through AllocationResponses of all cached device resources.
|
|
for _, devices := range resources {
|
|
resp := devices.allocResp
|
|
// Each Allocate response has the following artifacts.
|
|
// Environment variables
|
|
// Mount points
|
|
// Device files
|
|
// Container annotations
|
|
// These artifacts are per resource per container.
|
|
// Updates RunContainerOptions.Envs.
|
|
for k, v := range resp.Envs {
|
|
if e, ok := envsMap[k]; ok {
|
|
klog.V(4).Infof("Skip existing env %s %s", k, v)
|
|
if e != v {
|
|
klog.Errorf("Environment variable %s has conflicting setting: %s and %s", k, e, v)
|
|
}
|
|
continue
|
|
}
|
|
klog.V(4).Infof("Add env %s %s", k, v)
|
|
envsMap[k] = v
|
|
opts.Envs = append(opts.Envs, kubecontainer.EnvVar{Name: k, Value: v})
|
|
}
|
|
|
|
// Updates RunContainerOptions.Devices.
|
|
for _, dev := range resp.Devices {
|
|
if d, ok := devsMap[dev.ContainerPath]; ok {
|
|
klog.V(4).Infof("Skip existing device %s %s", dev.ContainerPath, dev.HostPath)
|
|
if d != dev.HostPath {
|
|
klog.Errorf("Container device %s has conflicting mapping host devices: %s and %s",
|
|
dev.ContainerPath, d, dev.HostPath)
|
|
}
|
|
continue
|
|
}
|
|
klog.V(4).Infof("Add device %s %s", dev.ContainerPath, dev.HostPath)
|
|
devsMap[dev.ContainerPath] = dev.HostPath
|
|
opts.Devices = append(opts.Devices, kubecontainer.DeviceInfo{
|
|
PathOnHost: dev.HostPath,
|
|
PathInContainer: dev.ContainerPath,
|
|
Permissions: dev.Permissions,
|
|
})
|
|
}
|
|
|
|
// Updates RunContainerOptions.Mounts.
|
|
for _, mount := range resp.Mounts {
|
|
if m, ok := mountsMap[mount.ContainerPath]; ok {
|
|
klog.V(4).Infof("Skip existing mount %s %s", mount.ContainerPath, mount.HostPath)
|
|
if m != mount.HostPath {
|
|
klog.Errorf("Container mount %s has conflicting mapping host mounts: %s and %s",
|
|
mount.ContainerPath, m, mount.HostPath)
|
|
}
|
|
continue
|
|
}
|
|
klog.V(4).Infof("Add mount %s %s", mount.ContainerPath, mount.HostPath)
|
|
mountsMap[mount.ContainerPath] = mount.HostPath
|
|
opts.Mounts = append(opts.Mounts, kubecontainer.Mount{
|
|
Name: mount.ContainerPath,
|
|
ContainerPath: mount.ContainerPath,
|
|
HostPath: mount.HostPath,
|
|
ReadOnly: mount.ReadOnly,
|
|
// TODO: This may need to be part of Device plugin API.
|
|
SELinuxRelabel: false,
|
|
})
|
|
}
|
|
|
|
// Updates for Annotations
|
|
for k, v := range resp.Annotations {
|
|
if e, ok := annotationsMap[k]; ok {
|
|
klog.V(4).Infof("Skip existing annotation %s %s", k, v)
|
|
if e != v {
|
|
klog.Errorf("Annotation %s has conflicting setting: %s and %s", k, e, v)
|
|
}
|
|
continue
|
|
}
|
|
klog.V(4).Infof("Add annotation %s %s", k, v)
|
|
annotationsMap[k] = v
|
|
opts.Annotations = append(opts.Annotations, kubecontainer.Annotation{Name: k, Value: v})
|
|
}
|
|
}
|
|
return opts
|
|
}
|
|
|
|
// getContainerDevices returns the devices assigned to the provided container for all ResourceNames
|
|
func (pdev *podDevices) getContainerDevices(podUID, contName string) ResourceDeviceInstances {
|
|
pdev.RLock()
|
|
defer pdev.RUnlock()
|
|
|
|
if _, podExists := pdev.devs[podUID]; !podExists {
|
|
return nil
|
|
}
|
|
if _, contExists := pdev.devs[podUID][contName]; !contExists {
|
|
return nil
|
|
}
|
|
resDev := NewResourceDeviceInstances()
|
|
for resource, allocateInfo := range pdev.devs[podUID][contName] {
|
|
if len(allocateInfo.deviceIds) == 0 {
|
|
continue
|
|
}
|
|
devicePluginMap := make(map[string]pluginapi.Device)
|
|
for numaid, devlist := range allocateInfo.deviceIds {
|
|
for _, devId := range devlist {
|
|
NUMANodes := []*pluginapi.NUMANode{{ID: numaid}}
|
|
if pDev, ok := devicePluginMap[devId]; ok && pDev.Topology != nil {
|
|
if nodes := pDev.Topology.GetNodes(); nodes != nil {
|
|
NUMANodes = append(NUMANodes, nodes...)
|
|
}
|
|
}
|
|
|
|
devicePluginMap[devId] = pluginapi.Device{
|
|
// ID and Healthy are not relevant here.
|
|
Topology: &pluginapi.TopologyInfo{
|
|
Nodes: NUMANodes,
|
|
},
|
|
}
|
|
}
|
|
}
|
|
resDev[resource] = devicePluginMap
|
|
}
|
|
return resDev
|
|
}
|
|
|
|
// DeviceInstances is a mapping device name -> plugin device data
|
|
type DeviceInstances map[string]pluginapi.Device
|
|
|
|
// ResourceDeviceInstances is a mapping resource name -> DeviceInstances
|
|
type ResourceDeviceInstances map[string]DeviceInstances
|
|
|
|
func NewResourceDeviceInstances() ResourceDeviceInstances {
|
|
return make(ResourceDeviceInstances)
|
|
}
|
|
|
|
func (rdev ResourceDeviceInstances) Clone() ResourceDeviceInstances {
|
|
clone := NewResourceDeviceInstances()
|
|
for resourceName, resourceDevs := range rdev {
|
|
clone[resourceName] = make(map[string]pluginapi.Device)
|
|
for devID, dev := range resourceDevs {
|
|
clone[resourceName][devID] = dev
|
|
}
|
|
}
|
|
return clone
|
|
}
|