Bring upstream v0.5.0 changes - #37

…_pick_gh_actions

Remove GH actions to manage cherry-picks and backports in favor of Prow plugins

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.80.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.80.0...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Signed-off-by: Abigail McCarthy <[email protected]>

Bumps debian from `109e2c6` to `8d7a3dc`.

---
updated-dependencies:
- dependency-name: debian
  dependency-version: trixie-slim
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [actions/stale](https://github.com/actions/stale) from 10.2.0 to 10.3.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@b5d41d4...eb5cf3a)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-version: 10.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Cleanup prereqs and add links to install.md page

Bumps [github.com/NVIDIA/nvidia-container-toolkit](https://github.com/NVIDIA/nvidia-container-toolkit) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/NVIDIA/nvidia-container-toolkit/releases)
- [Changelog](https://github.com/NVIDIA/nvidia-container-toolkit/blob/v1.19.1/CHANGELOG.md)
- [Commits](NVIDIA/nvidia-container-toolkit@v1.19.0...v1.19.1)

---
updated-dependencies:
- dependency-name: github.com/NVIDIA/nvidia-container-toolkit
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@68bde55...7211b7c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.0 to 9.2.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@1e7e51e...82606bf)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: 9.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

…ot/github_actions/github/codeql-action-4.36.0

build(deps): bump github/codeql-action from 4.35.4 to 4.36.0

…ot/go_modules/main/github.com/NVIDIA/nvidia-container-toolkit-1.19.1

build(deps): bump github.com/NVIDIA/nvidia-container-toolkit from 1.19.0 to 1.19.1

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.40.0 to 1.41.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.40.0...v1.41.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

…ot/github_actions/golangci/golangci-lint-action-9.2.1

build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1

…ot/go_modules/main/github.com/onsi/gomega-1.41.0

build(deps): bump github.com/onsi/gomega from 1.40.0 to 1.41.0

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.28.3 to 2.29.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.3...v2.29.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

…ot/github_actions/actions/stale-10.3.0

build(deps): bump actions/stale from 10.2.0 to 10.3.0

…ot/docker/deployments/container/main/debian-8d7a3dc

build(deps): bump debian from `109e2c6` to `8d7a3dc` in /deployments/container

…ot/go_modules/main/google.golang.org/grpc-1.81.1

build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.1

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...df4cb1c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

1. Fix a symlink to build-dra-driver-gpu.sh
2. Rename build-dra-driver.sh to build-dra-driver-gpu.sh to keep it consistent. 

Signed-off-by: Runzhen <[email protected]>

Fix a symlink to build-dra-driver-gpu.sh

Signed-off-by: Abigail McCarthy <[email protected]>

Add hugo and docsy site

Signed-off-by: Abigail McCarthy <[email protected]>

…ot/go_modules/main/github.com/onsi/ginkgo/v2-2.29.0

build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0

…ot/github_actions/actions/checkout-6.0.3

build(deps): bump actions/checkout from 6.0.2 to 6.0.3

- Add config option to configure nvidia-cuda-mps-control multiuser mode, for sharing MPS between different users
- Add CUDA compute capability check for multi-user option + tests for MPS capability checks

Add MPS config option to configure nvidia-cuda-mps-control to run in multi user mode

Signed-off-by: Vishesh Tanksale <[email protected]>

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@4a36011...b7ad1da)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

…ot/github_actions/actions/setup-go-7.0.0

build(deps): bump actions/setup-go from 6.4.0 to 7.0.0

…ot/github_actions/github/codeql-action/analyze-4.37.6

build(deps): bump github/codeql-action/analyze from 4.36.0 to 4.37.6

…ot/github_actions/github/codeql-action/init-4.37.6

build(deps): bump github/codeql-action/init from 4.36.0 to 4.37.6

…llback

Prepare: dont rollback partially prepared vfio claims

Signed-off-by: Vishesh Tanksale <[email protected]>

Co-authored-by: arcusbuilds <[email protected]>

…cess-FM

Adding rejection logic for invalid admin access claims

Signed-off-by: Shiva Krishna, Merla <[email protected]>

…r_toolkit_version_v1.20.0

Bump container toolkit version to v1.20.0

Signed-off-by: Shiva Krishna, Merla <[email protected]>

Bumps golang from 1.26.5 to 1.26.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.26.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

…ot/docker/deployments/devel/main/golang-1.26.6

build(deps): bump golang from 1.26.5 to 1.26.6 in /deployments/devel

…t-types

test(gpu-kubelet-plugin): add unit tests for root.go & types.go

…ckpoint

test(gpu-kubelet-plugin): add unit tests for checkpoint.go & checkpointv.go

…0.40.0

Bump golang.org/x/mod to v0.40.0 due to a high CVE golang/go#80745

Signed-off-by: Shiva Krishna, Merla <[email protected]>

…im config

* Validate CD domain ID before generating the IMEX configuration files
* Enable validation of ComputeDomain claim configs through the webhook

Signed-off-by: Shiva Krishna, Merla <[email protected]>
Co-authored-by: thc1006 <[email protected]>

…omain_id

Validate CD domain ID before generating the IMEX configuration files

…_release_v0.5.0

Bump versions for the release of v0.5.0

Retarget the fork from v25.3.2 to upstream v0.5.0. Upstream moved to
kubernetes-sigs and re-versioned from calendar versions to semver, so
v25.12.0 was followed by v0.4.0, v0.4.1 and v0.5.0 -- v0.5.0 is the
latest release despite the lower number.

Giant Swarm delta carried over unchanged: the chart moves to
helm/dra-driver-nvidia-gpu/, Chart.yaml gains the icon and the team and
audience annotations, _helpers.tpl adds the team common label, and the
packaging files (.circleci, .abs, .kube-linter.yaml, CODEOWNERS,
SECURITY.md, CHANGELOG.md) come along. The upstream tests/bats suite is
dropped -- it targets NVIDIA's own multi-node NVLink rigs.

The Flatcar patch stays dropped: v0.5.0 still searches /opt/bin first in
cmd/*/root.go and hack/kubelet-plugin-prestart.sh.

Two behaviour changes on top of upstream:

  * Both networkPolicy.enabled defaults flip to true. Giant Swarm
    clusters run a default-deny-all NetworkPolicy in kube-system, so
    with upstream's default the kubelet plugin's egress to the API
    server is dropped: it registers with kubelet and then never
    publishes a ResourceSlice, so DRA silently allocates nothing.

  * image.repository points at the Giant Swarm mirror. Upstream's image
    moved to registry.k8s.io/dra-driver-nvidia/dra-driver-nvidia-gpu in
    v0.5.0, so the mirror needs the v0.5.0 tag before the chart installs
    from its defaults.

Requires NVIDIA driver 570+; Flatcar 4593 defaults to 535, on which the
init container loops on 'nvidia-smi --version'. See the upgrade notes in
CHANGELOG.md.

Signed-off-by: Fernando <[email protected]>

…am-only workflows

The catalog already publishes this chart at 25.3.2-flatcar.1. Upstream
re-versioned from calendar versions to semver, so following its number
would set the chart to 0.5.0 -- and 0.5.0 < 25.3.2 under semver, which
means the catalog would treat this release as older than what clusters
are already running and never offer it as an upgrade. Nothing warns
about this; it is not a conflict.

So the chart version continues the Giant Swarm line at 26.0.0 while
appVersion tracks upstream at 0.5.0. Major rather than minor because the
release is breaking: extraDriverBinaryPaths, extraDriverLibraryPaths and
extraHostPathMounts are gone, and the driver now needs NVIDIA 570+. The
image tag still derives from appVersion, so it resolves to v0.5.0.

Also drop five workflows that came with the upstream tree and only mean
anything in upstream's repo: stale.yml and issue-triage.yml (their bots,
which would label and close Giant Swarm issues), release-automation.yml
(cuts releases from a VERSION file, competing with CircleCI), and
mock-nvml-e2e.yaml plus tests.yaml (both reference paths and a Prow
cluster this fork does not have). helm.yaml stays -- basic-checks.yaml
calls it and its make target already follows the chart to helm/.

Signed-off-by: Fernando <[email protected]>