cicd: release Network Operator v26.1.0-beta.1 (#1927)

nvidia-ci-cd · web-flow · commit 6be30b16632a · 2025-12-23T22:38:33.000+02:00
Created by the [*create-release-pr* job](https://github.com/Mellanox/network-operator/actions/runs/20465101287).
diff --git a/deployment/network-operator/Chart.yaml b/deployment/network-operator/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
 name: network-operator
-version: 25.10.0-beta.6
+version: 26.1.0-beta.1
 kubeVersion: '>= 1.21.0'
-appVersion: v25.10.0-beta.6
+appVersion: v26.1.0-beta.1
 description: Nvidia network operator
 type: application
 keywords:
diff --git a/deployment/network-operator/charts/sriov-network-operator/README.md b/deployment/network-operator/charts/sriov-network-operator/README.md
@@ -133,7 +133,9 @@ This section contains general parameters that apply to both the operator and dae
 | `sriovOperatorConfig.logLevel` | int | `2` | log level for both operator and sriov-network-config-daemon |
 | `sriovOperatorConfig.disableDrain` | bool | `false` | disable node draining when configuring SR-IOV, set to true in case of a single node cluster or any other justifiable reason |
 | `sriovOperatorConfig.configurationMode` | string | `daemon` | sriov-network-config-daemon configuration mode. either `daemon` or `systemd` |
+| `sriovOperatorConfig.disablePlugins` | list | `[]` | list of sriov-network-config-daemon plugins to disable (e.g., `["mellanox"]`) |
 | `sriovOperatorConfig.featureGates` | map[string]bool | `{}` | feature gates to enable/disable |
+| `sriovOperatorConfig.configDaemonEnvVars` | map[string]string | `{}` | custom environment variables for sriov-network-config-daemon |
 
 **Note** 
 
diff --git a/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_ovsnetworks.yaml b/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_ovsnetworks.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: ovsnetworks.sriovnetwork.openshift.io
 spec:
   group: sriovnetwork.openshift.io
diff --git a/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovibnetworks.yaml b/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovibnetworks.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: sriovibnetworks.sriovnetwork.openshift.io
 spec:
   group: sriovnetwork.openshift.io
diff --git a/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworknodepolicies.yaml b/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworknodepolicies.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: sriovnetworknodepolicies.sriovnetwork.openshift.io
 spec:
   group: sriovnetwork.openshift.io
@@ -161,8 +161,11 @@ spec:
                       "0d58", "1572", "158b", "1013", "1015", "1017", "101b".
                     type: string
                   netFilter:
-                    description: Infrastructure Networking selection filter. Allowed
-                      value "openstack/NetworkID:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+                    description: |-
+                      Infrastructure Networking selection filter.
+                      Allowed values:
+                      - "openstack/NetworkID:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
+                      - "aws/NetworkID:xxxxxxxx"
                     type: string
                   pfNames:
                     description: Name of SR-IoV PF.
diff --git a/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworknodestates.yaml b/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworknodestates.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: sriovnetworknodestates.sriovnetwork.openshift.io
 spec:
   group: sriovnetwork.openshift.io
diff --git a/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworkpoolconfigs.yaml b/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworkpoolconfigs.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: sriovnetworkpoolconfigs.sriovnetwork.openshift.io
 spec:
   group: sriovnetwork.openshift.io
@@ -48,7 +48,6 @@ spec:
                   maxUnavailable defines either an integer number or percentage
                   of nodes in the pool that can go Unavailable during an update.
 
-
                   A value larger than 1 will mean multiple nodes going unavailable during
                   the update, which may affect your workload stress on the remaining nodes.
                   Drain will respect Pod Disruption Budgets (PDBs) such as etcd quorum guards,
diff --git a/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworks.yaml b/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovnetworks.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: sriovnetworks.sriovnetwork.openshift.io
 spec:
   group: sriovnetwork.openshift.io
@@ -107,7 +107,7 @@ spec:
                 type: string
               vlan:
                 description: VLAN ID to assign for the VF. Defaults to 0.
-                maximum: 4096
+                maximum: 4094
                 minimum: 0
                 type: integer
               vlanProto:
diff --git a/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovoperatorconfigs.yaml b/deployment/network-operator/charts/sriov-network-operator/crds/sriovnetwork.openshift.io_sriovoperatorconfigs.yaml
@@ -3,7 +3,7 @@ apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
 metadata:
   annotations:
-    controller-gen.kubebuilder.io/version: v0.14.0
+    controller-gen.kubebuilder.io/version: v0.19.0
   name: sriovoperatorconfigs.sriovnetwork.openshift.io
 spec:
   group: sriovnetwork.openshift.io
@@ -40,6 +40,13 @@ spec:
           spec:
             description: SriovOperatorConfigSpec defines the desired state of SriovOperatorConfig
             properties:
+              configDaemonEnvVars:
+                additionalProperties:
+                  type: string
+                description: |-
+                  ConfigDaemonEnvVars allows to specify custom environment variables
+                  for the sriov-network-config-daemon
+                type: object
               configDaemonNodeSelector:
                 additionalProperties:
                   type: string
diff --git a/deployment/network-operator/charts/sriov-network-operator/templates/configmap.yaml b/deployment/network-operator/charts/sriov-network-operator/templates/configmap.yaml
@@ -49,6 +49,7 @@ data:
   Marvell_OCTEON_Fusion_CNF95XX: "177d b600 b603"
   Marvell_OCTEON10_CN10XXX: "177d b900 b903"
   Marvell_OCTEON_Fusion_CNF105XX: "177d ba00 ba03"
+  Amazon_Elastic_Network_Adapter: "1d0f ec20 ec20"
   {{- range .Values.supportedExtraNICs }}
   {{ . }}
   {{- end }}
diff --git a/deployment/network-operator/charts/sriov-network-operator/templates/operator.yaml b/deployment/network-operator/charts/sriov-network-operator/templates/operator.yaml
@@ -43,6 +43,9 @@ spec:
           image: {{ .Values.images.operator }}
           command:
             - sriov-network-operator
+          securityContext:
+            readOnlyRootFilesystem: true
+            allowPrivilegeEscalation: false
           resources:
             requests:
               cpu: 100m
diff --git a/deployment/network-operator/charts/sriov-network-operator/templates/sriovoperatorconfig.yaml b/deployment/network-operator/charts/sriov-network-operator/templates/sriovoperatorconfig.yaml
@@ -14,8 +14,18 @@ spec:
   logLevel: {{ .Values.sriovOperatorConfig.logLevel }}
   disableDrain: {{ .Values.sriovOperatorConfig.disableDrain }}
   configurationMode: {{ .Values.sriovOperatorConfig.configurationMode }}
+  {{- with .Values.sriovOperatorConfig.disablePlugins }}
+  disablePlugins:
+    {{- range . }}
+    - {{ . }}
+    {{- end }}
+  {{- end }}
   {{- with .Values.sriovOperatorConfig.featureGates }}
   featureGates:
     {{- range $k, $v := .}}{{printf "%s: %t" $k $v | nindent 4 }}{{ end }}
   {{- end }}
-{{ end }}
+  {{- with .Values.sriovOperatorConfig.configDaemonEnvVars }}
+  configDaemonEnvVars:
+    {{- range $k, $v := .}}{{ printf "%s: %s" $k ($v | toString | quote) | nindent 4 }}{{ end }}
+  {{- end }}
+{{ end }}
diff --git a/deployment/network-operator/charts/sriov-network-operator/values.yaml b/deployment/network-operator/charts/sriov-network-operator/values.yaml
@@ -109,8 +109,12 @@ sriovOperatorConfig:
   disableDrain: false
   # sriov-network-config-daemon configuration mode. either "daemon" or "systemd"
   configurationMode: daemon
+  # list of sriov-network-config-daemon plugins to disable (e.g., ["mellanox"])
+  disablePlugins: []
   # feature gates to enable/disable
   featureGates: {}
+  # custom environment variables for sriov-network-config-daemon
+  configDaemonEnvVars: {}
 
 # Example for supportedExtraNICs values ['MyNIC: "8086 1521 1520"']
 supportedExtraNICs: []
diff --git a/deployment/network-operator/values.yaml b/deployment/network-operator/values.yaml
@@ -45,7 +45,7 @@ node-feature-discovery:
 
   image:
     repository: nvcr.io/nvstaging/mellanox/node-feature-discovery
-    tag: network-operator-v25.10.0
+    tag: network-operator-v26.1.0-beta.1
     pullPolicy: IfNotPresent
   # imagePullSecrest for node-feature-discovery Network Operator related images
   #imagePullSecrets: []
@@ -157,15 +157,15 @@ sriov-network-operator:
 
   # Image URIs for sriov-network-operator components.
   images:
-    operator: nvcr.io/nvstaging/mellanox/sriov-network-operator:network-operator-v25.10.0
-    sriovConfigDaemon: nvcr.io/nvstaging/mellanox/sriov-network-operator-config-daemon:network-operator-v25.10.0
-    sriovCni: nvcr.io/nvstaging/mellanox/sriov-cni:network-operator-v25.10.0
-    ibSriovCni: nvcr.io/nvstaging/mellanox/ib-sriov-cni:network-operator-v25.10.0
-    ovsCni: nvcr.io/nvstaging/mellanox/ovs-cni-plugin:network-operator-v25.10.0
-    rdmaCni: nvcr.io/nvstaging/mellanox/rdma-cni:network-operator-v25.10.0
-    sriovDevicePlugin: nvcr.io/nvstaging/mellanox/sriov-network-device-plugin:network-operator-v25.10.0
+    operator: nvcr.io/nvstaging/mellanox/sriov-network-operator:network-operator-v26.1.0-beta.1
+    sriovConfigDaemon: nvcr.io/nvstaging/mellanox/sriov-network-operator-config-daemon:network-operator-v26.1.0-beta.1
+    sriovCni: nvcr.io/nvstaging/mellanox/sriov-cni:network-operator-v26.1.0-beta.1
+    ibSriovCni: nvcr.io/nvstaging/mellanox/ib-sriov-cni:network-operator-v26.1.0-beta.1
+    ovsCni: nvcr.io/nvstaging/mellanox/ovs-cni-plugin:network-operator-v26.1.0-beta.1
+    rdmaCni: nvcr.io/nvstaging/mellanox/rdma-cni:network-operator-v26.1.0-beta.1
+    sriovDevicePlugin: nvcr.io/nvstaging/mellanox/sriov-network-device-plugin:network-operator-v26.1.0-beta.1
     resourcesInjector: ghcr.io/k8snetworkplumbingwg/network-resources-injector:v1.7.0
-    webhook: nvcr.io/nvstaging/mellanox/sriov-network-operator-webhook:network-operator-v25.10.0
+    webhook: nvcr.io/nvstaging/mellanox/sriov-network-operator-webhook:network-operator-v26.1.0-beta.1
   # imagePullSecrest for SR-IOV Network Operator related images
   # imagePullSecrets: []
   sriovOperatorConfig:
@@ -193,7 +193,7 @@ maintenance-operator-chart:
     image:
       repository: nvcr.io/nvstaging/mellanox
       name: maintenance-operator
-      tag: network-operator-v25.10.0
+      tag: network-operator-v26.1.0-beta.1
     admissionController:
       # -- enable admission controller of the operator
       enable: false
@@ -319,7 +319,7 @@ operator:
       # -- Init container image name.
       image: network-operator-init-container
       # -- Init container image version.
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
 
 # -- An optional list of references to secrets to use for pulling any of the
 # Network Operator images.
diff --git a/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-full-ocp.yaml b/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-full-ocp.yaml
@@ -45,7 +45,7 @@ spec:
   rdmaSharedDevicePlugin:
     image: k8s-rdma-shared-dev-plugin
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     # The config below directly propagates to k8s-rdma-shared-device-plugin configuration.
     # Replace 'devices' with your (RDMA capable) netdevice name.
     config: |
@@ -64,7 +64,7 @@ spec:
   sriovDevicePlugin:
     image: sriov-network-device-plugin
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     config: |
       {
         "resourceList": [
@@ -82,32 +82,32 @@ spec:
     ipoib:
       image: ipoib-cni
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
   nvIpam:
     image: nvidia-k8s-ipam
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     enableWebhook: false
   ibKubernetes:
     image: ib-kubernetes
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     pKeyGUIDPoolRangeStart: "02:00:00:00:00:00:00:00"
     pKeyGUIDPoolRangeEnd: "02:FF:FF:FF:FF:FF:FF:FF"
     ufmSecret: ufm-secret
   nicFeatureDiscovery:
     image: nic-feature-discovery
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
   nicConfigurationOperator:
     operator:
       image: nic-configuration-operator
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     configurationDaemon:
       image: nic-configuration-operator-daemon
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     # Uncomment to explicitely reset the NIC's Firmware before the reboot and after updating its non-volatile configuration.
     # Might be required on DGX servers where configuration update is not successfully applied after the warm reboot.
     # env:
diff --git a/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-full.yaml b/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-full.yaml
@@ -45,7 +45,7 @@ spec:
   rdmaSharedDevicePlugin:
     image: k8s-rdma-shared-dev-plugin
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     # The config below directly propagates to k8s-rdma-shared-device-plugin configuration.
     # Replace 'devices' with your (RDMA capable) netdevice name.
     config: |
@@ -64,7 +64,7 @@ spec:
   sriovDevicePlugin:
     image: sriov-network-device-plugin
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     config: |
       {
         "resourceList": [
@@ -82,31 +82,31 @@ spec:
     cniPlugins:
       image: plugins
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     ipoib:
       image: ipoib-cni
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     multus:
       image: multus-cni
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
   nvIpam:
     image: nvidia-k8s-ipam
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     enableWebhook: false
   ibKubernetes:
     image: ib-kubernetes
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     pKeyGUIDPoolRangeStart: "02:00:00:00:00:00:00:00"
     pKeyGUIDPoolRangeEnd: "02:FF:FF:FF:FF:FF:FF:FF"
     ufmSecret: ufm-secret
   nicFeatureDiscovery:
     image: nic-feature-discovery
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
   docaTelemetryService:
     image: doca_telemetry
     repository: nvcr.io/nvidia/doca
@@ -115,11 +115,11 @@ spec:
     operator:
       image: nic-configuration-operator
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     configurationDaemon:
       image: nic-configuration-operator-daemon
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     # Uncomment to explicitely reset the NIC's Firmware before the reboot and after updating its non-volatile configuration.
     # Might be required on DGX servers where configuration update is not successfully applied after the warm reboot.
     # env:
diff --git a/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-ipoib.yaml b/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-ipoib.yaml
@@ -40,7 +40,7 @@ spec:
   rdmaSharedDevicePlugin:
     image: k8s-rdma-shared-dev-plugin
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     # The config below directly propagates to k8s-rdma-shared-device-plugin configuration.
     # Replace 'devices' with your (RDMA capable) netdevice name.
     config: |
@@ -59,18 +59,18 @@ spec:
   nvIpam:
     image: nvidia-k8s-ipam
     repository: nvcr.io/nvstaging/mellanox
-    version: network-operator-v25.10.0
+    version: network-operator-v26.1.0-beta.1
     enableWebhook: false
   secondaryNetwork:
     cniPlugins:
       image: plugins
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     ipoib:
       image: ipoib-cni
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
     multus:
       image: multus-cni
       repository: nvcr.io/nvstaging/mellanox
-      version: network-operator-v25.10.0
+      version: network-operator-v26.1.0-beta.1
diff --git a/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-nvidia-ipam.yaml b/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-nvidia-ipam.yaml
diff --git a/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-ocp-hostdev.yaml b/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-ocp-hostdev.yaml
diff --git a/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-ocp.yaml b/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr-ocp.yaml
diff --git a/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr.yaml b/example/crs/mellanox.com_v1alpha1_nicclusterpolicy_cr.yaml
diff --git a/hack/release.yaml b/hack/release.yaml
