Reference Architecture 23.02.1

New Components/Features: - Stack Validation: Test cases created for Anuket Reference Architecture Kubernetes Component Level Architecture specifications, to be used for Anuket Reference Conformance Kubernetes and Project Sylva Stack validation Test cases created for Device Plugins Single Root IO Virtualization (SR-IOV) Data Plane Development Kit and Multus Container Network Interface - Cloud Native Network Function (CNF) Validation: Test case to check CNF allocation of SR-IOV devices like virtual functions of network adapters or accelerators, to be used for Project Sylva CNF validation Updates/Changes: - Added workaround for building the Intel(R) Ethernet Operator and SR-IOV FEC (Forward-Error Correction) Operator - Resolved issue regarding the user-space CNI by disabling Vector Packet Processing (VPP) - Removed dependency of Intel(R) Quick Assist Technology (Intel(R) QAT) on OpenSSL to allow independent deployment of Crypto libraries New Hardware (Platforms/CPUs/GPUs/Accelerators): - N/A (same as RA23.02) Removed Support: - CNDP (Cloud Native Data Plane) Known Limitations/Restrictions: - N/A (same as RA23.02) Co-authored-by: Gherghe, Calin <[email protected]> Co-authored-by: Kasanic, Denis <[email protected]> Co-authored-by: Park, Seungweon <[email protected]> Co-authored-by: Ren, Shu <[email protected]>
intel · Jun 23, 2023 · 0ffdc2d · 0ffdc2d
1 parent e7d7466
commit 0ffdc2d
Show file tree

Hide file tree

Showing 76 changed files with 2,949 additions and 147 deletions.
diff --git a/generate/playbook_templates/infra_playbook.j2 b/generate/playbook_templates/infra_playbook.j2
@@ -257,10 +257,6 @@
         - configure-openssl
         - intel-platform-qat-setup
       when:
-        - qat_devices | default([]) | length > 0
-        - iommu_enabled | default(true) | bool
-          or on_vms | default(false) | bool
-        - update_qat_drivers | default(false) | bool
         - openssl_install | default(false) | bool
 {%- endif %}
 {%- if playbook_name in ['full_nfv', 'on_prem', 'remote_fp', 'regional_dc', 'build_your_own'] %}

diff --git a/generate/profiles_templates/cloud/profiles.yml b/generate/profiles_templates/cloud/profiles.yml
@@ -54,8 +54,6 @@
 #     kibana
 # - wireguard
 # - multus
-# - cndp
-# - cndp_dp
 # - minio
 # - cert_manager
 # - registry
@@ -141,8 +139,6 @@ access:
   wireguard: off
   multus: on
   firewall: off
-  cndp: off
-  cndp_dp: off
   minio: off
   cert_manager: on
   registry: off
@@ -185,8 +181,6 @@ basic:
   wireguard: off
   multus: on
   firewall: off
-  cndp: off
-  cndp_dp: off
   cert_manager: on
   registry: off
   hugepages: optional
@@ -261,8 +255,6 @@ full_nfv:
   wireguard: off
   multus: on
   firewall: off
-  cndp: off
-  cndp_dp: off
   minio: off
   cert_manager: on
   registry: off
@@ -335,8 +327,6 @@ on_prem:
   wireguard: off
   multus: on
   firewall: off
-  cndp: off
-  cndp_dp: off
   cert_manager: on
   registry: off
   hugepages: on
@@ -396,8 +386,6 @@ regional_dc:
   wireguard: off
   multus: on
   firewall: off
-  cndp: off
-  cndp_dp: off
   cert_manager: on
   registry: off
   hugepages: optional
@@ -468,8 +456,6 @@ remote_fp:
   wireguard: off
   multus: on
   firewall: off
-  cndp: off
-  cndp_dp: off
   cert_manager: on
   registry: off
   hugepages: on
@@ -543,8 +529,6 @@ build_your_own:
   wireguard: off
   multus: optional
   firewall: off
-  cndp: off
-  cndp_dp: off
   minio: off
   cert_manager: optional
   registry: off

diff --git a/generate/profiles_templates/common/group_vars.j2 b/generate/profiles_templates/common/group_vars.j2
@@ -308,7 +308,7 @@ qat_supported_vf_dev_ids:
 
 {%- if openssl in ['on', 'optional'] %}
 # This feature will enable OpenSSL*Engine
-openssl_engine_enabled: {% if openssl == 'on' and qat == 'on' %}true{% else %}false{% endif %} # to activate OpenSSL*Engine set both install_openssl and update_qat_drivers to 'true' in host_vars
+openssl_engine_enabled: {% if openssl == 'on' %}true{% else %}false{% endif %} # to activate OpenSSL*Engine set 'install_openssl' to 'true' in host_vars
 {% endif %}
 
 {%- if gpu_dp in ['on', 'optional'] %}

diff --git a/generate/profiles_templates/common/host_vars.j2 b/generate/profiles_templates/common/host_vars.j2
@@ -300,7 +300,7 @@ qat_devices: []
 
 {%- if openssl in ['on', 'optional'] %}
 # Install and configure OpenSSL cryptography
-openssl_install: {% if openssl == 'on' and qat == "on" %}true{% else %}false{% endif %} # This requires update_qat_drivers set to 'true' in host vars
+openssl_install: {% if openssl == 'on' %}true{% else %}false{% endif %}
 {% endif -%}
 {%- if isolcpu in ["on", "optional"] %}
 # CPU isolation from Linux scheduler

diff --git a/generate/profiles_templates/k8s/profiles.yml b/generate/profiles_templates/k8s/profiles.yml
@@ -55,8 +55,6 @@
 #     kibana
 # - wireguard
 # - multus
-# - cndp
-# - cndp_dp
 # - minio
 # - lpvsp
 # - rook_ceph
@@ -144,8 +142,6 @@ access:
   wireguard: optional
   multus: on
   firewall: optional
-  cndp: off
-  cndp_dp: off
   minio: off
   lpvsp: optional
   rook_ceph: off
@@ -190,8 +186,6 @@ basic:
   wireguard: optional
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   minio: off
   lpvsp: on
   rook_ceph: off
@@ -269,8 +263,6 @@ full_nfv:
   wireguard: optional
   multus: on
   firewall: optional
-  cndp: on
-  cndp_dp: on
   minio: optional
   lpvsp: on
   rook_ceph: on
@@ -346,8 +338,6 @@ on_prem:
   wireguard: optional
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   minio: optional
   lpvsp: on
   rook_ceph: optional
@@ -410,8 +400,6 @@ regional_dc:
   wireguard: optional
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   minio: optional
   lpvsp: on
   rook_ceph: optional
@@ -485,8 +473,6 @@ remote_fp:
   wireguard: optional
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   minio: off
   lpvsp: on
   rook_ceph: off
@@ -565,8 +551,6 @@ build_your_own:
   wireguard: optional
   multus: optional
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   minio: optional
   lpvsp: optional
   rook_ceph: optional

diff --git a/generate/profiles_templates/vm/vm_host_profiles.yml b/generate/profiles_templates/vm/vm_host_profiles.yml
@@ -50,8 +50,6 @@
 #     kibana
 # - wireguard
 # - multus
-# - cndp
-# - cndp_dp
 # - cert_manager
 # - registry
 # - hugepages
@@ -154,8 +152,6 @@ basic:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: optional
@@ -222,8 +218,6 @@ full_nfv:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: on
-  cndp_dp: on
   cert_manager: on
   registry: on
   hugepages: on
@@ -285,8 +279,6 @@ on_prem:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: on
@@ -336,8 +328,6 @@ regional_dc:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: optional
@@ -400,8 +390,6 @@ remote_fp:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: on
@@ -469,8 +457,6 @@ build_your_own:
   wireguard: optional
   multus: optional
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: optional
   registry: optional
   hugepages: optional

diff --git a/generate/profiles_templates/vm/vms_profiles.yml b/generate/profiles_templates/vm/vms_profiles.yml
@@ -50,8 +50,6 @@
 #     kibana
 # - wireguard
 # - multus
-# - cndp
-# - cndp_dp
 # - cert_manager
 # - registry
 # - hugepages
@@ -160,8 +158,6 @@ basic:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: optional
@@ -228,8 +224,6 @@ full_nfv:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: on
-  cndp_dp: on
   cert_manager: on
   registry: on
   hugepages: on
@@ -291,8 +285,6 @@ on_prem:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: on
@@ -342,8 +334,6 @@ regional_dc:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: optional
@@ -406,8 +396,6 @@ remote_fp:
   wireguard: on
   multus: on
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: on
   registry: on
   hugepages: on
@@ -475,8 +463,6 @@ build_your_own:
   wireguard: optional
   multus: optional
   firewall: optional
-  cndp: optional
-  cndp_dp: optional
   cert_manager: optional
   registry: optional
   hugepages: optional

diff --git a/playbooks/preflight.yml b/playbooks/preflight.yml
@@ -858,15 +858,14 @@
         success_msg: "GPU device plugin is enabled"
       when: configure_gpu is defined and configure_gpu
 
-# OpenSSL & OpenSSL*Engine must only be configured / installed when update_qat_drivers is set to 'true' and qat_devices is defined in host vars
-# or auto-detected from the system
-    - name: check OpenSSL and OpenSSL*Engine requirements
+    - name: check OpenSSL and OpenSSL*Engine requirements when OOT or Intree QAT setup configured
       assert:
         that:
-          - update_qat_drivers
-        fail_msg: "OpenSSL & OpenSSL*Engine will only configured if update_qat_drivers is set to 'true'"
-        success_msg: "OpenSSL & OpenSSL*Engine verification completed"
-      when: openssl_install is defined and openssl_install
+          - openssl_install
+        fail_msg: "OpenSSL & OpenSSL*Engine must be configured if 'update_qat_drivers' or 'enable_intel_qatlibs' are set to 'true'"
+        success_msg: "Assertion of OpenSSL & OpenSSL*Engine for QAT passed"
+      when:
+        - update_qat_drivers | default(false) or enable_intel_qatlibs | default(false)
 
     - name: check KMRA sgx_dp requirements
       assert:
@@ -1005,6 +1004,12 @@
           - number_of_hugepages_2M = {{ number_of_hugepages_2M }} (host_vars)
       when: vpp_enabled is defined and vpp_enabled # host_vars
 
+    # W/A Disabled until userspace CNI compilation is fixed
+    - name: check OS for VPP compilation
+      fail:
+        msg: "VPP is temporarily not supported."
+      when: vpp_enabled is defined and vpp_enabled
+
     - name: check OS for VPP compilation
       assert:
         that: