dpuagent

Documentation

Index

• func IsBootstrapAbortErr(err error) bool
• type DPUAgent
  • func NewDPUAgent(optCtx *operations.Context) *DPUAgent
  • func (d *DPUAgent) Run(ctx context.Context) error
  • func (d *DPUAgent) Shutdown() error
  • func (d *DPUAgent) StartCACertUpdateLoop(ctx context.Context)
  • func (d *DPUAgent) StartDPUReconcileLoop(ctx context.Context)
  • func (d *DPUAgent) StartNICRuntimeConfigLoop(ctx context.Context)
  • func (d *DPUAgent) StartSPIREAttestorLoop(ctx context.Context)

Functions

func IsBootstrapAbortErr

func IsBootstrapAbortErr(err error) bool

IsBootstrapAbortErr reports whether err indicates bootstrap exited for reprovision.

Types

type DPUAgent

type DPUAgent struct {
	// contains filtered or unexported fields
}

func NewDPUAgent

func NewDPUAgent(optCtx *operations.Context) *DPUAgent

func (*DPUAgent) Run

func (d *DPUAgent) Run(ctx context.Context) error

func (*DPUAgent) Shutdown

func (d *DPUAgent) Shutdown() error

Shutdown releases resources that remain available after provisioning completes.

func (*DPUAgent) StartCACertUpdateLoop

func (d *DPUAgent) StartCACertUpdateLoop(ctx context.Context)

StartCACertUpdateLoop starts the background CA certificate update loop.

func (*DPUAgent) StartDPUReconcileLoop

func (d *DPUAgent) StartDPUReconcileLoop(ctx context.Context)

StartDPUReconcileLoop starts the owned-DPU watch/reconcile loop in background.

func (*DPUAgent) StartNICRuntimeConfigLoop

func (d *DPUAgent) StartNICRuntimeConfigLoop(ctx context.Context)

StartNICRuntimeConfigLoop starts the post-provisioning E/W NIC runtime config loop (first apply with retry, then periodic reapply). No-op when NIC provisioning did not start a DMS session.

func (*DPUAgent) StartSPIREAttestorLoop

func (d *DPUAgent) StartSPIREAttestorLoop(ctx context.Context)

StartSPIREAttestorLoop enables the SPIRE Kubernetes workload attestor and reports whether it is configured.

This is a loop rather than an operation because the attestor needs the kubelet client certificate, which only appears after TLS bootstrap, so waiting for it in the operation sequence would block everything behind it.

Restarting the SPIRE agent from here is safe: the DPU agent's JWT-SVID is already on disk and stays valid while the agent re-attests, and the client re-reads the token file.