From bcafcac8133aed8178966ded0581ee9f6b245f90 Mon Sep 17 00:00:00 2001
From: Oleksandr Berezovskyi <berezovskyi.oleksandr@gmail.com>
Date: Tue, 10 Mar 2026 22:56:49 +0200
Subject: [PATCH] feat(k8s/infrastructure): add Node Feature Discovery for
 automatic hardware labeling

---
 .../controllers/nfd/namespace.yaml            |  7 +++++++
 .../controllers/nfd/release.yaml              | 20 +++++++++++++++++++
 .../controllers/nfd/repository.yaml           |  9 +++++++++
 3 files changed, 36 insertions(+)
 create mode 100644 kubernetes/infrastructure/controllers/nfd/namespace.yaml
 create mode 100644 kubernetes/infrastructure/controllers/nfd/release.yaml
 create mode 100644 kubernetes/infrastructure/controllers/nfd/repository.yaml

diff --git a/kubernetes/infrastructure/controllers/nfd/namespace.yaml b/kubernetes/infrastructure/controllers/nfd/namespace.yaml
new file mode 100644
index 0000000..b113cf2
--- /dev/null
+++ b/kubernetes/infrastructure/controllers/nfd/namespace.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: nfd
+  labels:
+    pod-security.kubernetes.io/enforce: privileged
diff --git a/kubernetes/infrastructure/controllers/nfd/release.yaml b/kubernetes/infrastructure/controllers/nfd/release.yaml
new file mode 100644
index 0000000..48c662b
--- /dev/null
+++ b/kubernetes/infrastructure/controllers/nfd/release.yaml
@@ -0,0 +1,20 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: nfd
+  namespace: flux-system
+spec:
+  chart:
+    spec:
+      chart: node-feature-discovery
+      version: 0.18.3
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: nfd
+        namespace: flux-system
+  interval: 1m0s
+  targetNamespace: nfd
+  install:
+    createNamespace: true
diff --git a/kubernetes/infrastructure/controllers/nfd/repository.yaml b/kubernetes/infrastructure/controllers/nfd/repository.yaml
new file mode 100644
index 0000000..516df5e
--- /dev/null
+++ b/kubernetes/infrastructure/controllers/nfd/repository.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: nfd
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://kubernetes-sigs.github.io/node-feature-discovery/charts