Setup on BCM clusters

DPS setup on BCM clusters

This document describes the DPS setup steps on clusters with BCM versions 10 and 11.

This guide assumes you have already installed Kubernetes in your BCM environment and you have the appropriate permissions and kubeapi access. DPS has been tested on Kubernetes 1.30.11, 1.31.7, 1.32.3.

Prepare for DPS installation

• Kyverno configuration options:

  • Update the Kyverno policies. Recommended for Production

    • Installing DPS will reveal which policies need to be modified.

  • Delete the policies - easiest method for dev and test

    kubectl get clusterpolicies
    
    kubectl delete clusterpolicies <POLICYNAME>

  • Remove Kyverno or do not install Kyverno

Configure and Install DPS

• Plan your DPS configuration

  • Download the Helm chart from NGC. Check DPS Helm Charts on NGC for available versions.

    # Set your version (e.g., 0.7.0)
    VERSION="0.7.0"
    
    # Download the chart
    helm fetch https://helm.ngc.nvidia.com/nvidia/charts/dps-${VERSION}.tgz
    
    # Extract the chart
    tar -xzf dps-${VERSION}.tgz

• Add your image pull credentials

  • Create the pull credentials in your kubernetes cluster

    kubectl create ns dps
    
    # SECURITY NOTE: Use environment variables or secure credential management
    kubectl create secret docker-registry dps-registry -n dps \
      --docker-server="nvcr.io" \
      --docker-username='$oauthtoken' \
      --docker-password="<your-ngc-api-key>"

  • Add your pull secret to your DPS configuration.

    global:
      imagePullSecrets:
        - name: dps-registry

• Install DPS

  helm install dps ./dps \
    --namespace dps \
    -f <YOUR VALUES>.yaml \
    --create-namespace

Links

1. DPS on NGC