This page contains advanced configuration documentation for the DOCA Platform Framework (DPF). These guides cover advanced topics and configurations for power users and administrators.
Documentation Sections
-
DPU Services - Documentation for DPF DPU services including Argus, Blueman, Firefly, DOCA Telemetry Service, and Kata Containers
-
Host Trusted with Non Kubernetes Workers - Installation guides for DPF Host Trusted with workers that are not part of a Kubernetes cluster
-
Using Private Registries - Configuration for using private container registries
-
Air-Gapped DPUs with a SOCKS Proxy - Letting DPUs without internet access pull images through a SOCKS5 proxy by configuring containerd with a DPUFlavor
-
Zero Trust Advanced Configuration - Advanced configuration for the DPF Zero Trust
-
Provisioning CA Certificate Rotation - Runbook for rotating the provisioning CA with dual-trust convergence checks on BMC and DPU sides
-
SPIFFE Workload Identity - Configuration for authenticating the DPU Agent to the management cluster with a SPIRE-issued JWT-SVID, and for giving DPUServices their own SPIRE identities, instead of bootstrap tokens
-
Hostless DPU Provisioning - Configuration for provisioning DPUs without host-side discovery or host-side reboot handling
-
Secondary Network support for HBN-OVNK use case - Documentation for enabling secondary network support for Host Based Networking and OVN Kubernetes
-
Host Trusted Multi-DPU support OVN-Kubernetes and HBN Services - Guide that describes how to target particular DPUs for provisioning and service orchestration of OVN-Kubernetes and HBN Services.
-
Per-DPU BMC Credentials - Configuration for using unique BMC credentials per DPU device instead of the shared password
-
BMC Factory Reset - The one-time BMC factory reset performed while a DPUDevice is initialized, and how to opt out for BMCs with a static IP address
-
DPUFlavorTemplate: Per-DPU Flavor Rendering - How to render a per-DPU DPUFlavor from a template using values in DPUDevice.spec.values
-
Kata Containers on Host Nodes - Guide for running pods with Kata VM isolation on host worker nodes, including SR-IOV VF passthrough with DOCA hardware offload
-
Encrypted Secrets - Configuration for storing secret data in an external secret store and replicating it to the management cluster with External Secrets Operator
-
Kamaji Encryption at Rest - Configuration for encrypting Secrets and ConfigMaps in Kamaji-managed DPU cluster etcd datastores
-
Telemetry Level Labels - Per-DPU generation of the DOCA telemetry
level_labels.inifrom DPUDevice values with a DPUFlavorTemplate -
Service Readiness - Holding a DPU out of service, and optionally holding the host at the start of its OS initialization, until the DPU reaches a chosen readiness gate
Last updated: