cpu: expose the total number of AMD SEV ASID and ES

[ArangoGutierrez]

This patch add SEV ASIDs and the related (but distinct) SEV Encrypted State (SEV-ES) IDs as two quantities to be exposed via extended resources. In a kernel built with CONFIG_CGROUP_MISC on a suitably equipped AMD CPU, the root control group will have a misc.capacity file that shows the number of available IDs in each category:

    $ cat misc.capacity
    sev 50
    sev_es 10

The added extended resources are:

• sev.asids
• sev.encrypted_state_ids

An example on how to expose them on a suitable system is:

apiVersion: nfd.k8s-sigs.io/v1alpha1
kind: NodeFeatureRule
metadata:
  name: sev-capacity
spec:
  rules:
    - name: "SEV system capacity"
      extendedResources:
       sev_asids: "@cpu.security.sev.asids"
       sev_es: "@cpu.security.sev.encrypted_state_ids"
      matchFeatures:
        - feature: cpu.security
          matchExpressions:
            sev.enabled: {op: Exists}

[netlify]

✅ Deploy Preview for kubernetes-sigs-nfd ready!

Name	Link
🔨 Latest commit	05ef5d4
🔍 Latest deploy log	https://app.netlify.com/sites/kubernetes-sigs-nfd/deploys/643d8338ed1a0c000751dbfc
😎 Deploy Preview	https://deploy-preview-1149--kubernetes-sigs-nfd.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site settings.

[ArangoGutierrez]

/cc @zvonkok

[zvonkok]

@ryansavino @larrydewey PTAL

[marquiz]

Also, this PR doesn't have anything to do with extended resources directly, so I'd suggest to retitle (in commit message too), e.g. to cpu: expose the total number of AMD SEV ASID and ES

[ArangoGutierrez]

@marquiz can we add this to #1068 ?

[marquiz]

@marquiz can we add this to #1068 ?

Yes, let's squeeze this small one in
/milestone v0.13.0

[marquiz]

Thanks @ArangoGutierrez, to me this looks simple and good to get merged 👍

@zvonkok et al feel free to lgtm if/when you're happy

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ArangoGutierrez, marquiz

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [marquiz]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[zvonkok]

/lgtm

[k8s-ci-robot]

LGTM label has been added.

Git tree hash: a465b69d056fcf31b4baf5ba1a96d6f8c79e0332