{"id":13819715,"url":"https://github.com/intel/intel-device-plugins-for-kubernetes","last_synced_at":"2026-03-07T23:31:10.748Z","repository":{"id":37686727,"uuid":"133428589","full_name":"intel/intel-device-plugins-for-kubernetes","owner":"intel","description":"Collection of Intel device plugins for Kubernetes","archived":false,"fork":false,"pushed_at":"2026-03-06T09:00:26.000Z","size":188330,"stargazers_count":124,"open_issues_count":39,"forks_count":217,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-03-06T13:26:42.125Z","etag":null,"topics":["5g","cloud","cloud-computing","edge-computing","kubernetes","plug-ins","swrepo"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/intel.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2018-05-14T22:30:06.000Z","updated_at":"2026-03-06T08:59:19.000Z","dependencies_parsed_at":"2026-03-06T11:04:21.983Z","dependency_job_id":null,"html_url":"https://github.com/intel/intel-device-plugins-for-kubernetes","commit_stats":null,"previous_names":[],"tags_count":28,"template":false,"template_full_name":null,"purl":"pkg:github/intel/intel-device-plugins-for-kubernetes","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intel%2Fintel-device-plugins-for-kubernetes","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intel%2Fintel-device-plugins-for-kubernetes/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intel%2Fintel-device-plugins-for-kubernetes/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intel%2Fintel-device-plugins-for-kubernetes/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/intel","download_url":"https://codeload.github.com/intel/intel-device-plugins-for-kubernetes/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/intel%2Fintel-device-plugins-for-kubernetes/sbom","scorecard":{"id":490630,"data":{"date":"2025-08-18T12:55:31Z","repo":{"name":"github.com/intel/intel-device-plugins-for-kubernetes","commit":"cdabc7b070a488a0354984868cbeb1364ae5f9d6"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.4,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yaml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:19","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/ci.yaml:20","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/ci.yaml:30","Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yaml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:29","Info: jobLevel 'actions' permission set to 'read': .github/workflows/devel.yaml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:25","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/devel.yaml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:31","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/devel.yaml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:50","Info: jobLevel 'actions' permission set to 'read': .github/workflows/devel.yaml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:15","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/devel.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/lib-publish.yaml:41","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/lib-trivy.yaml:77","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/lib-validate.yaml:33","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yml:18","Info: jobLevel 'actions' permission set to 'read': .github/workflows/release.yaml:27","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:28","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/release.yaml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yaml:39","Info: jobLevel 'actions' permission set to 'read': .github/workflows/trivy-periodic.yaml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yaml:12","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/ci.yaml:13","Info: topLevel 'contents' permission set to 'read': .github/workflows/devel.yaml:8","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/devel.yaml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-build.yaml:7","Info: topLevel 'actions' permission set to 'read': .github/workflows/lib-codeql.yaml:7","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-codeql.yaml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-e2e.yaml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-publish.yaml:17","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-scorecard.yaml:7","Info: topLevel 'actions' permission set to 'read': .github/workflows/lib-trivy.yaml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-trivy.yaml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/lib-validate.yaml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:12","Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/release.yaml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yaml:7","Info: topLevel 'contents' permission set to 'read': .github/workflows/trivy-periodic.yaml:10"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Info: Possibly incomplete results: error parsing shell code: if statement must end with \"fi\": build/docker/templates/intel-gpu-levelzero.Dockerfile.in:34","Info: Possibly incomplete results: error parsing shell code: if statement must end with \"fi\": build/docker/templates/intel-gpu-levelzero.Dockerfile.in:81","Warn: containerImage not pinned by hash: build/docker/intel-deviceplugin-operator.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-deviceplugin-operator.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-dlb-initcontainer.Dockerfile:38","Warn: containerImage not pinned by hash: build/docker/intel-dlb-initcontainer.Dockerfile:58","Warn: containerImage not pinned by hash: build/docker/intel-dlb-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-dlb-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-dsa-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-dsa-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-fpga-admissionwebhook.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-fpga-admissionwebhook.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-fpga-initcontainer.Dockerfile:38","Warn: containerImage not pinned by hash: build/docker/intel-fpga-initcontainer.Dockerfile:86","Warn: containerImage not pinned by hash: build/docker/intel-fpga-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-fpga-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-gpu-fakedev.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-gpu-fakedev.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-gpu-initcontainer.Dockerfile:38","Warn: containerImage not pinned by hash: build/docker/intel-gpu-initcontainer.Dockerfile:75","Warn: containerImage not pinned by hash: build/docker/intel-gpu-levelzero.Dockerfile:29","Warn: containerImage not pinned by hash: build/docker/intel-gpu-levelzero.Dockerfile:81","Warn: containerImage not pinned by hash: build/docker/intel-gpu-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-gpu-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-iaa-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-iaa-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-idxd-config-initcontainer.Dockerfile:17: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:203908e97d521fa492d7a56b29404d6105325ccf4ec211d90ab7165226b7ceff","Warn: containerImage not pinned by hash: build/docker/intel-npu-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-npu-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-qat-initcontainer.Dockerfile:38","Warn: containerImage not pinned by hash: build/docker/intel-qat-initcontainer.Dockerfile:58","Warn: containerImage not pinned by hash: build/docker/intel-qat-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-qat-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-sgx-admissionwebhook.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-sgx-admissionwebhook.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-sgx-initcontainer.Dockerfile:38","Warn: containerImage not pinned by hash: build/docker/intel-sgx-initcontainer.Dockerfile:75","Warn: containerImage not pinned by hash: build/docker/intel-sgx-plugin.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-sgx-plugin.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/intel-xpumanager-sidecar.Dockerfile:39","Warn: containerImage not pinned by hash: build/docker/intel-xpumanager-sidecar.Dockerfile:59","Warn: containerImage not pinned by hash: build/docker/templates/intel-dlb-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-dlb-initcontainer.Dockerfile.in:13","Warn: containerImage not pinned by hash: build/docker/templates/intel-fpga-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-fpga-initcontainer.Dockerfile.in:19","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-initcontainer.Dockerfile.in:16","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-levelzero.Dockerfile.in:17","Warn: containerImage not pinned by hash: build/docker/templates/intel-gpu-levelzero.Dockerfile.in:75","Warn: containerImage not pinned by hash: build/docker/templates/intel-idxd-config-initcontainer.Dockerfile.in:1: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:203908e97d521fa492d7a56b29404d6105325ccf4ec211d90ab7165226b7ceff","Warn: containerImage not pinned by hash: build/docker/templates/intel-qat-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-qat-initcontainer.Dockerfile.in:13","Warn: containerImage not pinned by hash: build/docker/templates/intel-sgx-initcontainer.Dockerfile.in:4","Warn: containerImage not pinned by hash: build/docker/templates/intel-sgx-initcontainer.Dockerfile.in:16","Warn: containerImage not pinned by hash: demo/accel-config-demo/Dockerfile:15: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:203908e97d521fa492d7a56b29404d6105325ccf4ec211d90ab7165226b7ceff","Warn: containerImage not pinned by hash: demo/crypto-perf/Dockerfile:1","Warn: containerImage not pinned by hash: demo/crypto-perf/Dockerfile:40: pin your Docker image by updating debian:sid-slim to debian:sid-slim@sha256:e0c4b2263e68e6a65ea4fff98f1143bb7f205576bdb609168089a88d0e4b381c","Warn: containerImage not pinned by hash: demo/dlb-dpdk-demo/Dockerfile:1","Warn: containerImage not pinned by hash: demo/dlb-dpdk-demo/Dockerfile:27: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: demo/dlb-libdlb-demo/Dockerfile:1","Warn: containerImage not pinned by hash: demo/dlb-libdlb-demo/Dockerfile:19: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214","Warn: containerImage not pinned by hash: demo/dsa-dpdk-dmadevtest/Dockerfile:1","Warn: containerImage not pinned by hash: demo/dsa-dpdk-dmadevtest/Dockerfile:24: pin your Docker image by updating debian:sid-slim to debian:sid-slim@sha256:e0c4b2263e68e6a65ea4fff98f1143bb7f205576bdb609168089a88d0e4b381c","Warn: containerImage not pinned by hash: demo/intel-npu-demo/Dockerfile:1","Warn: containerImage not pinned by hash: demo/intel-npu-demo/Dockerfile:18","Warn: containerImage not pinned by hash: demo/intel-opencl-icd/Dockerfile:1: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: demo/opae-nlb-demo/Dockerfile:1","Warn: containerImage not pinned by hash: demo/opae-nlb-demo/Dockerfile:27: pin your Docker image by updating debian:unstable-slim to debian:unstable-slim@sha256:203908e97d521fa492d7a56b29404d6105325ccf4ec211d90ab7165226b7ceff","Warn: containerImage not pinned by hash: demo/openssl-qat-engine/Dockerfile:1","Warn: containerImage not pinned by hash: demo/openssl-qat-engine/Dockerfile:29: pin your Docker image by updating ubuntu:24.04 to ubuntu:24.04@sha256:7c06e91f61fa88c08cc74f7e1b7c69ae24910d745357e0dfe1d2c0322aaf20f9","Warn: containerImage not pinned by hash: demo/sgx-aesmd-demo/Dockerfile:3: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: containerImage not pinned by hash: demo/sgx-sdk-demo/Dockerfile:1","Warn: containerImage not pinned by hash: demo/sgx-sdk-demo/Dockerfile:69: pin your Docker image by updating ubuntu:22.04 to ubuntu:22.04@sha256:1aa979d85661c488ce030ac292876cf6ed04535d3a237e49f61542d8e5de5ae0","Warn: goCommand not pinned by hash: .github/workflows/lib-validate.yaml:91","Info:  30 out of  30 GitHub-owned GitHubAction dependencies pinned","Info:  10 out of  10 third-party GitHubAction dependencies pinned","Info:   0 out of  71 containerImage dependencies pinned","Info:   0 out of   1 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":8,"reason":"2 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2025-3521","Warn: Project is vulnerable to: GO-2025-3547"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(release-0.32): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"13 out of 13 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 10 contributing companies or organizations","details":["Info: found contributions from: 01org, bmwcarit, cncf, envoyproxy, intel, kubernetes, martindouglas@iinet.com, nokia, otcshare, red hat"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}}]},"last_synced_at":"2025-08-19T19:02:26.025Z","repository_id":37686727,"created_at":"2025-08-19T19:02:26.025Z","updated_at":"2025-08-19T19:02:26.025Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30237329,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-07T23:24:20.706Z","status":"ssl_error","status_checked_at":"2026-03-07T23:21:10.486Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["5g","cloud","cloud-computing","edge-computing","kubernetes","plug-ins","swrepo"],"created_at":"2024-08-04T08:00:52.064Z","updated_at":"2026-03-07T23:31:10.725Z","avatar_url":"https://github.com/intel.png","language":"Go","readme":"# Overview\n[![Build Status](https://github.com/intel/intel-device-plugins-for-kubernetes/actions/workflows/devel.yaml/badge.svg)](https://github.com/intel/intel-device-plugins-for-kubernetes/actions?query=workflow%3ADevel)\n[![Go Report Card](https://goreportcard.com/badge/github.com/intel/intel-device-plugins-for-kubernetes)](https://goreportcard.com/report/github.com/intel/intel-device-plugins-for-kubernetes)\n[![GoDoc](https://godoc.org/github.com/intel/intel-device-plugins-for-kubernetes/pkg/deviceplugin?status.svg)](https://godoc.org/github.com/intel/intel-device-plugins-for-kubernetes/pkg/deviceplugin)\n[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/intel/intel-device-plugins-for-kubernetes/badge)](https://api.securityscorecards.dev/projects/github.com/intel/intel-device-plugins-for-kubernetes)\n\nThis repository contains a framework for developing plugins for the Kubernetes\n[device plugins framework](https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/device-plugins/),\nalong with a number of device plugin implementations utilizing that framework.\n\nThe [v0.32.0 release](https://github.com/intel/intel-device-plugins-for-kubernetes/releases/latest)\nis the latest feature release with its documentation available [here](https://intel.github.io/intel-device-plugins-for-kubernetes/0.32/).\n\nTable of Contents\n\n* [Prerequisites](#prerequisites)\n* [Plugins](#plugins)\n    * [GPU device plugin](#gpu-device-plugin)\n    * [FPGA device plugin](#fpga-device-plugin)\n    * [QAT device plugin](#qat-device-plugin)\n    * [SGX device plugin](#sgx-device-plugin)\n    * [DSA device plugin](#dsa-device-plugin)\n    * [DLB device plugin](#dlb-device-plugin)\n    * [IAA device plugin](#iaa-device-plugin)\n* [Device Plugins Operator](#device-plugins-operator)\n* [XeLink XPU Manager sidecar](#xelink-xpu-manager-sidecar)\n* [Intel GPU Level-Zero sidecar](#intel-gpu-levelzero)\n* [Demos](#demos)\n* [Workload Authors](#workload-authors)\n* [Developers](#developers)\n* [Releases](#releases)\n    * [Supported Kubernetes versions](#supported-kubernetes-versions)\n    * [Release procedures](#release-procedures)\n* [Pre-built plugin images](#pre-built-plugin-images)\n    * [Signed container images](#signed-container-images)\n* [License](#license)\n* [Helm charts](#helm-charts)\n\n## Prerequisites\n\nPrerequisites for building and running these device plugins include:\n\n- Appropriate hardware and drivers\n- A fully configured [Kubernetes cluster]\n- A working [Go environment], of at least version v1.16.\n\n## Plugins\n\nThe below sections detail existing plugins developed using the framework.\n\n### GPU Device Plugin\n\nThe [GPU device plugin](cmd/gpu_plugin/README.md) provides access to\ndiscrete and integrated Intel GPU device files.\n\nThe demo subdirectory contains both a [GPU plugin demo video](demo/readme.md#intel-gpu-device-plugin-demo-video)\nand an OpenCL sample deployment (`intelgpu-job.yaml`).\n\n### FPGA Device Plugin\n\nThe [FPGA device plugin](cmd/fpga_plugin/README.md) supports FPGA passthrough for\nthe following hardware:\n\n- Intel® Arria® 10 devices\n- Intel® Stratix® 10 devices\n\nThe FPGA plugin comes as three parts.\n\n- the [device plugin](#device-plugin)\n- the [admission controller](#admission-controller)\n- the [OCI createRuntime hook](#OCI-createRuntime-hook)\n\nRefer to each individual sub-components documentation for more details.\nBrief overviews of the sub-components are below.\n\nThe demo subdirectory contains a\n[video](demo/readme.md#intel-fpga-device-plugin-demo-video) showing deployment\nand use of the FPGA plugin. Sources relating to the demo can be found in the\n[opae-nlb-demo](demo/opae-nlb-demo) subdirectory.\n\n#### Device Plugin\n\nThe [FPGA device plugin](cmd/fpga_plugin/README.md) is responsible for\ndiscovering and reporting FPGA devices to `kubelet`.\n\n#### Admission Controller\n\nThe [FPGA admission controller webhook](cmd/fpga_admissionwebhook/README.md)\nis responsible for performing mapping from user-friendly function IDs to the\nInterface ID and Bitstream ID that are required for FPGA programming. It also\nimplements access control by namespacing FPGA configuration information.\n\n#### OCI createRuntime Hook\n\nThe [FPGA OCI createRuntime hook](cmd/fpga_crihook/README.md) performs discovery\nof the requested FPGA function bitstream and programs FPGA devices based on the\nenvironment variables in the workload description.\n\n### [QAT](https://developer.intel.com/quickassist) Device Plugin\n\nThe [QAT plugin](cmd/qat_plugin/README.md) supports device plugin for Intel QAT adapters, and includes\ncode [showing deployment](cmd/qat_plugin/dpdkdrv) via [DPDK](https://doc.dpdk.org/guides/cryptodevs/qat.html).\n\nThe demo subdirectory includes details of both a\n[QAT DPDK demo](demo/readme.md#intel-quickassist-technology-device-plugin-with-dpdk-demo-video)\nand a [QAT OpenSSL demo](demo/readme.md#intel-quickassist-technology-device-plugin-openssl-demo-video).\nSource for the OpenSSL demo can be found in the [relevant subdirectory](demo/openssl-qat-engine).\n\nDetails for integrating the QAT device plugin into [Kata Containers](https://katacontainers.io/)\ncan be found in the\n[Kata Containers documentation repository](https://github.com/kata-containers/kata-containers/blob/main/docs/use-cases/using-Intel-QAT-and-kata.md).\n\n### SGX Device Plugin\n\nThe [SGX device plugin](cmd/sgx_plugin/README.md) allows workloads to use\nIntel® Software Guard Extensions (Intel® SGX) on\nplatforms with SGX Flexible Launch Control enabled, e.g.,:\n\n- 3rd Generation Intel® Xeon® Scalable processor family, code-named “Ice Lake”\n- Intel® Xeon® E3 processor\n- Intel® NUC Kit NUC7CJYH\n\nThe Intel SGX plugin comes in three parts.\n\n- the [device plugin](#sgx-plugin)\n- the [admission webhook](#sgx-admission-webhook)\n- the [SGX EPC memory registration](#sgx-epc-memory-registration)\n\nThe demo subdirectory contains a [video](demo/readme.md#intel-sgx-device-plugin-demo-video) showing the deployment\nand use of the Intel SGX device plugin. Sources relating to the demo can be found in the\n[sgx-sdk-demo](demo/sgx-sdk-demo) and [sgx-aesmd-demo](demo/sgx-aesmd-demo) subdirectories.\n\nBrief overviews of the Intel SGX sub-components are given below.\n\n\u003ca name=\"sgx-plugin\"\u003e\u003c/a\u003e\n#### device plugin\n\nThe [SGX device plugin](cmd/sgx_plugin/README.md) is responsible for discovering\nand reporting Intel SGX device nodes to `kubelet`.\n\nContainers requesting Intel SGX resources in the cluster should not use the\ndevice plugins resources directly.\n\n#### Intel SGX Admission Webhook\n\nThe Intel SGX admission webhook is responsible for performing Pod mutations based on\nthe `sgx.intel.com/quote-provider` pod annotation set by the user. The purpose\nof the webhook is to hide the details of setting the necessary device resources\nand volume mounts for using Intel SGX remote attestation in the cluster. Furthermore,\nthe Intel SGX admission webhook is responsible for writing a pod/sandbox\n`sgx.intel.com/epc` annotation that is used by Kata Containers to dynamically\nadjust its virtualized Intel SGX encrypted page cache (EPC) bank(s) size.\n\nThe Intel SGX admission webhook is available as part of\n[Intel Device Plugin Operator](cmd/operator/README.md) or\nas a standalone [SGX Admission webhook image](cmd/sgx_admissionwebhook/README.md).\n\n#### Intel SGX EPC memory registration\n\nThe Intel SGX EPC memory available on each node is registered as a Kubernetes extended resource using\nnode-feature-discovery (NFD). An NFD Node Feature Rule is installed as part of\n[SGX device plugin](cmd/sgx_plugin/README.md)\noperator deployment and NFD is configured to register the Intel SGX EPC memory\nextended resource.\n\nContainers requesting Intel SGX EPC resources in the cluster use\n`sgx.intel.com/epc` resource which is of\ntype [memory](https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#meaning-of-memory).\n\n### DSA Device Plugin\n\nThe [DSA device plugin](cmd/dsa_plugin/README.md) supports acceleration using\nthe Intel Data Streaming accelerator(DSA).\n\n### DLB Device Plugin\n\nThe [DLB device plugin](cmd/dlb_plugin/README.md) supports Intel Dynamic Load\nBalancer accelerator(DLB).\n\n### IAA Device Plugin\n\nThe [IAA device plugin](cmd/iaa_plugin/README.md) supports acceleration using\nthe Intel Analytics accelerator(IAA).\n\n## Device Plugins Operator\n\nTo simplify the deployment of the device plugins, a unified device plugins\noperator is implemented.\n\nCurrently the operator has support for the DSA, DLB, FPGA, GPU, IAA, QAT, and\nIntel SGX device plugins. Each device plugin has its own custom resource\ndefinition (CRD) and the corresponding controller that watches CRUD operations\nto those custom resources.\n\nThe [Device plugins operator README](cmd/operator/README.md) gives the installation and usage details for the community operator available on [operatorhub.io](https://operatorhub.io/operator/intel-device-plugins-operator).\n\nThe [Device plugins Operator for OpenShift](https://github.com/intel/intel-technology-enabling-for-openshift) gives the installation and usage details for the operator available on [Red Hat OpenShift Container Platform](https://catalog.redhat.com/software/operators/detail/61e9f2d7b9cdd99018fc5736).\n\n## XeLink XPU Manager Sidecar\n\nTo support interconnected GPUs in Kubernetes, XeLink sidecar is needed.\n\nThe [XeLink XPU Manager sidecar README](cmd/xpumanager_sidecar/README.md) gives information how the sidecar functions and how to use it.\n\n## Intel GPU Level-Zero sidecar\n\nSidecar uses Level-Zero API to provide additional GPU information for the GPU plugin that it cannot get through sysfs interfaces.\n\nSee [Intel GPU Level-Zero sidecar README](cmd/gpu_levelzero/README.md) for more details.\n\n## Demos\n\nThe [demo subdirectory](demo/readme.md) contains a number of demonstrations for\na variety of the available plugins.\n\n## Workload Authors\n\nFor workloads to get accesss to devices managed by the plugins, the\n`Pod` spec must specify the hardware resources needed:\n\n```\nspec:\n  containers:\n    - name: demo-container\n      image: \u003cregistry\u003e/\u003cimage\u003e:\u003cversion\u003e\n      resources:\n        limits:\n          \u003cdevice namespace\u003e/\u003cresource\u003e: X\n```\n\nThe summary of resources available via plugins in this repository is given in the list below.\n\n**Device Namespace : Registered Resource(s)**\n * `dlb.intel.com`  : `pf` or `vf`\n   * [dlb-libdlb-demo-pod.yaml](demo/dlb-libdlb-demo-pod.yaml)\n * `dsa.intel.com`  : `wq-user-[shared or dedicated]`\n   * [dsa-accel-config-demo-pod.yaml](demo/dsa-accel-config-demo-pod.yaml)\n   * [dsa-dpdk-dmadevtest.yaml](demo/dsa-dpdk-dmadevtest.yaml)\n * `fpga.intel.com` : custom, see [mappings](cmd/fpga_admissionwebhook/README.md#mappings)\n   * [intelfpga-job.yaml](demo/intelfpga-job.yaml)\n * `gpu.intel.com`  : `i915`, `i915_monitoring`, `xe` or `xe_monitoring`\n   * [intelgpu-job.yaml](demo/intelgpu-job.yaml)\n * `iaa.intel.com`  : `wq-user-[shared or dedicated]`\n   * [iaa-accel-config-demo-pod.yaml](demo/iaa-accel-config-demo-pod.yaml)\n * `qat.intel.com`  : `generic` or `cy`/`dc`/`asym-dc`/`sym-dc`\n   * [compress-perf-dpdk-pod-requesting-qat-dc.yaml](deployments/qat_dpdk_app/compress-perf/compress-perf-dpdk-pod-requesting-qat-dc.yaml)\n   * [crypto-perf-dpdk-pod-requesting-qat-cy.yaml](deployments/qat_dpdk_app/crypto-perf/crypto-perf-dpdk-pod-requesting-qat-cy.yaml)\n * `sgx.intel.com`  : `epc`\n   * [intelsgx-job.yaml](deployments/sgx_enclave_apps/base/intelsgx-job.yaml)\n\n## Developers\n\nFor information on how to develop a new plugin using the framework or work on development task in\nthis repository, see the [Developers Guide](DEVEL.md).\n\n## Releases\n\n### Supported Kubernetes Versions\n\nReleases are made under the github [releases area](https://github.com/intel/intel-device-plugins-for-kubernetes/releases). Supported releases and\nmatching Kubernetes versions are listed below:\n\n| Branch            | Kubernetes branch/version      | Status      |\n|:------------------|:-------------------------------|:------------|\n| release-0.32      | Kubernetes 1.32 branch v1.32.x | supported   |\n| release-0.31      | Kubernetes 1.31 branch v1.31.x | supported   |\n| release-0.30      | Kubernetes 1.30 branch v1.30.x | supported   |\n| release-0.29      | Kubernetes 1.29 branch v1.29.x | unsupported |\n| release-0.28      | Kubernetes 1.28 branch v1.28.x | unsupported |\n| release-0.27      | Kubernetes 1.27 branch v1.27.x | unsupported |\n| release-0.26      | Kubernetes 1.26 branch v1.26.x | unsupported |\n| release-0.25      | Kubernetes 1.25 branch v1.25.x | unsupported |\n| release-0.24      | Kubernetes 1.24 branch v1.24.x | unsupported |\n| release-0.23      | Kubernetes 1.23 branch v1.23.x | unsupported |\n| release-0.22      | Kubernetes 1.22 branch v1.22.x | unsupported |\n| release-0.21      | Kubernetes 1.21 branch v1.21.x | unsupported |\n| release-0.20      | Kubernetes 1.20 branch v1.20.x | unsupported |\n\n*Note:* Device plugins leverage the Kubernetes v1 API. The API itself is GA (generally available) and [does not change](https://kubernetes.io/docs/concepts/overview/kubernetes-api/#api-changes) between Kubernetes versions. One does not necessarily need to use the latest Kubernetes cluster with the latest device plugin version. Using a newer device plugins release should work without issues on an older Kubernetes cluster. One possible exception to this are the device plugins CRDs that can vary between versions.\n\n[Go environment](https://golang.org/doc/install) | [Kubernetes cluster setup](https://kubernetes.io/docs/setup/independent/create-cluster-kubeadm/)\n\n### Release procedures\n\nProject's release cadence is tied to Kubernetes release cadence. Device plugins release typically follows a couple of weeks after the Kubernetes release. There can be some delays on the releases due to required changes in the pull request pipeline. Once the content is available in the `main` branch and CI \u0026 e2e validation \u003cspan style=\"color:green\"\u003ePASS\u003c/span\u003ees, release branch will be created (e.g. release-0.26). The HEAD of release branch will also be tagged with the corresponding [tag](https://github.com/intel/intel-device-plugins-for-kubernetes/tags) (e.g. v0.26.0).\n\nDuring the [release creation](https://github.com/intel/intel-device-plugins-for-kubernetes/issues/1393), the project's documentation, deployment files etc. will be [changed](https://github.com/intel/intel-device-plugins-for-kubernetes/pull/1441) to point to the newly created version.\n\nPatch releases (e.g. 0.26.3) are done on a need basis if there are security issues or minor fixes requested for specific version. Fixes are always cherry-picked from the `main` branch to the release branches.\n\n## Pre-built plugin images\n\nPre-built images of the plugins are available on the Docker hub. These images\nare automatically built and uploaded to the hub from the latest main branch of\nthis repository.\n\nRelease tagged images of the components are also available on the Docker hub,\ntagged with their release version numbers in the format x.y.z, corresponding to\nthe branches and releases in this repository.\n\n**Note:** the default deployment files and operators are configured with\n[imagePullPolicy](https://kubernetes.io/docs/concepts/containers/images/#updating-images)\n```IfNotPresent``` and can be changed with ```scripts/set-image-pull-policy.sh```.\n\n### Signed container images\n\nStarting from 0.31 release, the images (`0.31.0` etc., not `devel`) are signed with keyless signing using `cosign`. The signing proof is stored in [rekor.sigstore.dev](https://rekor.sigstore.dev) in an append-only transparency log. The signature is also stored within the dockerhub.\n\nTo verify the signing in Kubernetes, one can use [policy managers](https://docs.sigstore.dev/policy-controller/overview/) with [keyless authorities](https://docs.sigstore.dev/policy-controller/overview/#configuring-keyless-authorities).\n\n## License\n\nAll of the source code required to build intel-device-plugins-for-kubernetes\nis available under Open Source licenses. The source code files identify external Go\nmodules used. Binaries are distributed as container images on\nDockerHub*. Those images contain license texts and source code under `/licenses`.\n\n### Helm Charts\n\nDevice Plugins Helm Charts are located in Intel Helm Charts repository [Intel Helm Charts](https://github.com/intel/helm-charts). This is another way of distributing Kubernetes resources of the device plugins framework.\n\nTo add repo:\n```\nhelm repo add intel https://intel.github.io/helm-charts\n```\n","funding_links":[],"categories":["Go"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintel%2Fintel-device-plugins-for-kubernetes","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fintel%2Fintel-device-plugins-for-kubernetes","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintel%2Fintel-device-plugins-for-kubernetes/lists"}