Skip to content

NVIDIA NIM on EKS AI Conformance for v1.35#79

Merged
jeefy merged 1 commit into
cncf:mainfrom
yuanchen8911:aicr-v1.35-conformance
Apr 21, 2026
Merged

NVIDIA NIM on EKS AI Conformance for v1.35#79
jeefy merged 1 commit into
cncf:mainfrom
yuanchen8911:aicr-v1.35-conformance

Conversation

@yuanchen8911

@yuanchen8911 yuanchen8911 commented Mar 24, 2026

Copy link
Copy Markdown
Contributor

Pre-submission checklist:

Please check each of these after submitting your pull request:

  • Please confirm that the company or organization submitting a platform for certification accepts and agrees to the Certified Kubernetes AI Platform Conformance Program Terms and Conditions.

  • Did you include the product/project logo in SVG, EPS or AI format?

  • Does your logo clearly state the name of your product and follow the participant logo guidelines?

  • If your product/project is open source, did you include the repoUrl?

For a full list of requirements, please refer to these sections of the docs: Contents of the PR, and Requirements.


NVIDIA NIM on EKS

Reworked based on WG feedback: This PR was originally submitted as AICR (a configuration tool). Per feedback from @ritazh and @jackfrancis (Slack thread), the WG requires certifying a product on a Kubernetes platform, not standalone tooling. We've reworked the submission to certify NVIDIA NIM on EKS — an AI inference product deployed on Amazon EKS.

NVIDIA NIM on EKS is a Kubernetes-based AI inference platform that deploys and manages NVIDIA NIM microservices on Amazon EKS with GPU scheduling, autoscaling, and Gateway API integration. NIM microservice lifecycle is managed by the NIM Operator.

Key distinction: NIM is an AI inference product, not configuration tooling. AICR serves as the deployment and validation tooling (similar to how sonobuoy is used for K8s conformance), while NIM is the certified product. No existing conformant platform needs to adopt AICR — this is NVIDIA certifying its own product on EKS.

Conformance Evidence

All 9 MUST requirements pass, plus 3 SHOULD requirements are implemented:

# Requirement Feature Result
1 dra_support Dynamic Resource Allocation PASS
2 gang_scheduling Gang Scheduling (KAI Scheduler) PASS
3 secure_accelerator_access Secure Accelerator Access PASS
4 accelerator_metrics Accelerator Metrics (DCGM Exporter) PASS
5 ai_service_metrics AI Service Metrics (NIM Inference) PASS
6 ai_inference Inference API Gateway (kgateway) PASS
7 robust_controller Robust AI Operator (NIM Operator) PASS
8 pod_autoscaling Pod Autoscaling (HPA + GPU Metrics) PASS
9 cluster_autoscaling Cluster Autoscaling PASS

Evidence was collected on an EKS v1.35 cluster with NVIDIA H100 80GB HBM3 GPUs running NIM inference workloads (Llama 3.2 1B via NIMService CR).

How this addresses prior feedback

@ritazh — "certify a product, not tooling":
NIM is the product being certified. AICR is the validation tooling, not the submission target. This follows the same pattern as other submissions where the certified product is a configured platform, not the tooling used to configure it.

@jackfrancis — "AICR is not a K8s cluster distro or platform":
Correct — and we are no longer certifying AICR. NIM on EKS is the product: an AI inference platform that uses the NIM Operator to manage NIM microservice lifecycle on EKS. AICR deployed the runtime components and collected the evidence, but the certified platform is NIM on EKS.

k8sConformanceUrl: For this submission, the certified product is NVIDIA NIM on EKS: an AI inference platform layered on top of Amazon EKS. NIM itself is not a Kubernetes distribution and does not have a separate entry in cncf/k8s-conformance, so we currently reference the underlying EKS v1.35 Kubernetes conformance entry to establish the base cluster's Kubernetes conformance. If the AI Conformance WG prefers a different convention for layered products, we're happy to update this field accordingly.

Next steps

  • Follow-up submissions planned for NIM on GKE, AKS, and OKE
  • AICR as validation tooling contribution to the WG community meetings (separate track)

@yuanchen8911

yuanchen8911 commented Mar 24, 2026

Copy link
Copy Markdown
Contributor Author

@yuanchen8911

Copy link
Copy Markdown
Contributor Author

cc @dims @mchmarny

Comment thread v1.35/aicr/PRODUCT.yaml Outdated
# AICR is not a Kubernetes distribution — it is an AI runtime layer deployed
# on existing conformant platforms. This URL references the conformant
# Kubernetes substrate (EKS) used for evidence collection.
# Also validated on GKE: https://github.com/cncf/k8s-conformance/tree/master/v1.35/gke

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we validate on AKS?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AICR has been validated on EKS, GKE, and AKS. AKS support was added and validated in NVIDIA/aicr#415. Note that AICR is platform-agnostic and works on any conformant Kubernetes cluster.

Comment thread v1.35/aicr/PRODUCT.yaml Outdated
Comment on lines +19 to +23
# AICR is not a Kubernetes distribution — it is an AI runtime layer deployed
# on existing conformant platforms. This URL references the conformant
# Kubernetes substrate (EKS) used for evidence collection.
# Also validated on GKE: https://github.com/cncf/k8s-conformance/tree/master/v1.35/gke
k8sConformanceUrl: "https://github.com/cncf/k8s-conformance/tree/master/v1.35/eks"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we'll need the K8s conformance for AICR as a prerequisite. We had to remove "Red Hat OpenShift Service on AWS"'s AI conformance previously due to lack of corresponding K8s conformance #44.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we'll need the K8s conformance for AICR as a prerequisite. We had to remove "Red Hat OpenShift Service on AWS"'s AI conformance previously due to lack of corresponding K8s conformance #44.

The platform certification isn't proposing AICR as a requirement for others. It's NVIDIA certifying its
own configured platform, the same way any other vendor submits their product. No existing conformant platform would need to adopt AICR, and it doesn't change the requirements for anyone else. The validating tools for conformance requirements is a separate topic.

@yuanchen8911

Copy link
Copy Markdown
Contributor Author

@jeefy , can you take a look when you get a chance? Thanks.

@ritazh

ritazh commented Mar 31, 2026

Copy link
Copy Markdown
Collaborator

xpost from a slack thread for future posterity.
https://kubernetes.slack.com/archives/C09813W8DC2/p1774920621774989?thread_ts=1774363606.075179&cid=C09813W8DC2

Thank you for submitting this PR @yuanchen8911
IMO AICR is valuable as an accelerator for implementing and validating the k8s AI conformance KARs, and I’d like to see it being a part of the k8s AI conformance program.

That said, I’m concerned about merging this PR as-is / right now because it risks effectively introducing “use AICR” as an implied requirement (even if unintentionally). Before we do anything that looks like a requirement shift, I think we need the program/vendor alignment and some bake time like we have done with all existing requirements and processes:

  1. New requirement concern: If the submission implies that “AICR is the way to become AI-conformant,” that’s a new dependency/tooling requirement. We should discuss this with all vendors to confirm it’s sufficiently common/neutral and doesn’t privilege one implementation path over others.
  2. Back-compat / impact on existing conformant products: Once there’s agreement in principle, we need to verify that all existing (and in-flight) conforming platforms can still meet the requirements without being forced to adopt AICR, or that we intentionally treat AICR as optional/reference.
  3. Process / bake time: Similar to how we graduate requirements from SHOULD → MUST, anything that functions like a new “MUST run tool X” needs advance notice, feedback collection, and time before it’s treated as baseline. More details: https://github.com/kubernetes-sigs/ai-conformance/blob/main/README.md#process-details

On your proposed next steps:

(1) Platform certification (AICR-enabled EKS/GKE/AKS/etc.): Assuming we get enough support for this new requirement as part of the program, then this is a good first step that these vendors can take.
(2) Tooling for the program: This feels like the clearest win. Let’s take this to the subproject community meetings and determine if AICR should be a new requirement or a “reference implementation/recipes/validation tooling".

@yuanchen8911

yuanchen8911 commented Mar 31, 2026

Copy link
Copy Markdown
Contributor Author

xpost from a slack thread for future posterity. https://kubernetes.slack.com/archives/C09813W8DC2/p1774920621774989?thread_ts=1774363606.075179&cid=C09813W8DC2

Thank you for submitting this PR @yuanchen8911 IMO AICR is valuable as an accelerator for implementing and validating the k8s AI conformance KARs, and I’d like to see it being a part of the k8s AI conformance program.

That said, I’m concerned about merging this PR as-is / right now because it risks effectively introducing “use AICR” as an implied requirement (even if unintentionally). Before we do anything that looks like a requirement shift, I think we need the program/vendor alignment and some bake time like we have done with all existing requirements and processes:

  1. New requirement concern: If the submission implies that “AICR is the way to become AI-conformant,” that’s a new dependency/tooling requirement. We should discuss this with all vendors to confirm it’s sufficiently common/neutral and doesn’t privilege one implementation path over others.
  2. Back-compat / impact on existing conformant products: Once there’s agreement in principle, we need to verify that all existing (and in-flight) conforming platforms can still meet the requirements without being forced to adopt AICR, or that we intentionally treat AICR as optional/reference.
  3. Process / bake time: Similar to how we graduate requirements from SHOULD → MUST, anything that functions like a new “MUST run tool X” needs advance notice, feedback collection, and time before it’s treated as baseline. More details: https://github.com/kubernetes-sigs/ai-conformance/blob/main/README.md#process-details

On your proposed next steps:

(1) Platform certification (AICR-enabled EKS/GKE/AKS/etc.): Assuming we get enough support for this new requirement as part of the program, then this is a good first step that these vendors can take. (2) Tooling for the program: This feels like the clearest win. Let’s take this to the subproject community meetings and determine if AICR should be a new requirement or a “reference implementation/recipes/validation tooling".

Thanks, @ritazh!

Re 1. What we're proposing to certify is a conformant K8s platform + AICR runtime (recipe). No K8s platform today is AI-conformant on its own, not EKS, GKE, AKS, OKE, or OpenShift. It's always the platform plus additional runtime components (GPU operators, device plugins, NCCL, gang scheduling, etc.) that make it AI-conformant. So what the program actually certifies is a K8s platform plus runtime components, a configured product built on top of a conformant base.

Every existing submission follows this pattern. OpenShift bundles the GPU operator stack, Gardener deploys additional components. They just ship it as one branded product. AICR makes this explicit rather than hiding it behind a single product name.

From this perspective, "conformant K8s platform + AICR runtime" is a valid platform to certify. 

To clarify, the platform certification isn't proposing AICR as a requirement for others. It's NVIDIA certifying its own configured platform, the same way any other vendor submits their product. No existing conformant platform would need to adopt AICR, and it doesn't change the requirements for anyone else.

We're happy to take the tooling contribution to the subproject community meetings in parallel. But that will requires some substantial discussion and work while the platform submission itself should be straightforward. It's just another vendor certification, not a new requirement or process change.

Would it help if we revised the PR t make it a specific base K8s distro (e.g., starting with EKS) + AICR runtime) as a named platform certification to make this distinction more explicit?

Re 2. We'll present and discuss the AICR validating tools and plan with the WG in a meeting.

@yuanchen8911

Copy link
Copy Markdown
Contributor Author

@yuanchen8911

Copy link
Copy Markdown
Contributor Author

@ritazh, I think we're aligning on the plan. Regarding priority and ordering of certification vs. validation tooling, we're happy to take the tooling contribution to the community meetings in parallel. But that will require substantial discussion and work TBH, while the platform submission is straightforward. It's just another vendor certification, not a new requirement or process change. Please let us know if we can proceed with reworking the PR to certify a specific K8s distro + AICR runtime components (deployment recipes)? Thanks.

@jackfrancis

Copy link
Copy Markdown

No K8s platform today is AI-conformant on its own, not EKS, GKE, AKS, OKE, or OpenShift. It's always the platform plus additional runtime components (GPU operators, device plugins, NCCL, gang scheduling, etc.) that make it AI-conformant.

The AI Conformance program does not certify "on its own" outcomes. The pattern is (abstractly):

  1. Demonstrate that the standard platform features are used to create a cluster, e.g., gcloud container clusters create
  2. Demonstrate that the standard platform configuration is used to apply the desired platform configuration, e.g., gcloud container clusters update
  3. Demonstrate that the standard Kubernetes API is used to apply the desired Kubernetes configuration, e.g., kubectl apply -f

To use a concrete example, here's the gang scheduling requirement, which describes requirements that accommodate the flexible AI/ML k8s landscape (ref: kubernetes-sigs/ai-conformance#54):

The platform must allow for the installation and successful operation of at least one gang scheduling solution that ensures all-or-nothing scheduling for distributed AI workloads (e.g. Kueue, Volcano, etc.) To be conformant, the vendor must demonstrate that their platform can successfully run at least one such solution.

This pattern of platform + apply specific, standard, and repeatable configuration is exactly why a tool like AICR can be a helpful accelerant for the AI Conformant platform ecosystem. :)

To clarify, the platform certification isn't proposing AICR as a requirement for others. It's NVIDIA certifying its own configured platform, the same way any other vendor submits their product.

Because AICR is not a Kubernetes cluster distro or platform (ref: https://github.com/NVIDIA/aicr/?tab=readme-ov-file#what-ai-cluster-runtime-is-not), it is not something to certify as AI Conformant per se. Similarly, we would not want to certify argo/flux/Cluster API as AI Conformant per se (even though all of these tools can be used for provisioning AI Conformant clusters).

I'm very excited that the launch of AICR coincides w/ early days of AI Conformance, as there's great opportunity to collaborate and standardize together!

@yuanchen8911 yuanchen8911 marked this pull request as draft March 31, 2026 18:47
@yuanchen8911 yuanchen8911 changed the title NVIDIA AI Cluster Runtime (AICR) AI Conformance for v1.35 (WIP) NVIDIA AI Cluster Runtime (AICR) AI Conformance for v1.35 Mar 31, 2026
@yuanchen8911

yuanchen8911 commented Mar 31, 2026

Copy link
Copy Markdown
Contributor Author

Per @ritazh's feedback, the CNCF AI Conformance WG requires certifying a product on a K8s platform, not standalone tooling/software. It sounds like an NVIDIA product/service such as NIM on EKS is the right framing. AICR serves as the deployment and validation tooling while NIM is the certified product.

Converting this PR to draft while we rework the submission accordingly.

@yuanchen8911 yuanchen8911 force-pushed the aicr-v1.35-conformance branch from 4d37933 to 65b191a Compare April 2, 2026 17:20
@yuanchen8911 yuanchen8911 changed the title (WIP) NVIDIA AI Cluster Runtime (AICR) AI Conformance for v1.35 NVIDIA NIM on EKS AI Conformance for v1.35 Apr 2, 2026
@yuanchen8911 yuanchen8911 marked this pull request as ready for review April 2, 2026 17:24
@yuanchen8911

Copy link
Copy Markdown
Contributor Author

Hi @ritazh @jackfrancis @jeefy @terrytangyuan @janetkuo @puja108 @dims @mchmarny,

Based on our discussion in the Slack thread, we've reworked this PR to certify NVIDIA NIM on EKS as the product, rather than AICR (which is now positioned as deployment/validation tooling only).

Key changes:

  • Product: NVIDIA NIM on EKS — an AI inference platform managed by the NIM Operator on Amazon EKS
  • AICR's role: Deployment and validation tooling (analogous to sonobuoy for K8s conformance), not the certified product
  • Evidence: All 9 MUST requirements pass, collected on EKS v1.35

This PR is ready for review. One open question in the description: k8sConformanceUrl references the underlying EKS conformance entry since NIM is a layered product, not a K8s distribution. Happy to adjust if a different approach is preferred.

Follow-up submissions for NIM on GKE/AKS/OKE are planned.

@yuanchen8911 yuanchen8911 force-pushed the aicr-v1.35-conformance branch 3 times, most recently from 3374162 to c125ebc Compare April 2, 2026 18:22
Comment thread v1.35/nvidia-nim-eks/PRODUCT.yaml
@yuanchen8911 yuanchen8911 force-pushed the aicr-v1.35-conformance branch from c125ebc to 4f6bf6b Compare April 8, 2026 18:04
@yuanchen8911

Copy link
Copy Markdown
Contributor Author

Thanks @jeefy for the clarification — that makes sense. Since NIM sits on top of EKS (which has its own K8s conformance), referencing EKS's conformance results via k8sConformanceUrl is the right pattern here.

Also fixed the broken virtualized_accelerator evidence URL that was causing the validate check to fail (NVIDIA restructured their docs). CI should be green now.

@yuanchen8911 yuanchen8911 requested review from jeefy and puja108 April 8, 2026 18:05
@yuanchen8911 yuanchen8911 force-pushed the aicr-v1.35-conformance branch from 4f6bf6b to e448c7a Compare April 14, 2026 18:53
@yuanchen8911

Copy link
Copy Markdown
Contributor Author

The documentation request from @dims and @puja108 has been addressed by the now-merged PR #89 (FAQ on certifying products on existing distributions).

This submission already follows that guidance — k8sConformanceUrl in v1.35/nvidia-nim-eks/PRODUCT.yaml references the underlying EKS conformance entry, consistent with the layered-product pattern described in the FAQ.

Rebased this branch onto main so the merged FAQ is included.

@yuanchen8911 yuanchen8911 requested a review from mfahlandt April 14, 2026 18:54
@ritazh

ritazh commented Apr 15, 2026

Copy link
Copy Markdown
Collaborator

Thank you for your updates @yuanchen8911 !

I would like to request a hold on this PR until we can provide better guidance on the requirements for layered products. I've opened #91 to clarify what a product built on an existing conformant distribution must demonstrate independently.

Since this may affect how the community interprets eligibility and certification scope, it would benefit from broader discussion. If you have input, please comment on #91 or join the next AI Conformance project meetings

/hold

@yuanchen8911

Copy link
Copy Markdown
Contributor Author

Thank you for your updates @yuanchen8911 !

I would like to request a hold on this PR until we can provide better guidance on the requirements for layered products. I've opened #91 to clarify what a product built on an existing conformant distribution must demonstrate independently.

Since this may affect how the community interprets eligibility and certification scope, it would benefit from broader discussion. If you have input, please comment on #91 or join the next AI Conformance project meetings

/hold

Thanks @ritazh! It will be helpful to align on guidance for layered products. Happy to adjust this submission as needed once the requirements are clarified. Please keep us updated. cc @dims

@jeefy jeefy merged commit 6b22a28 into cncf:main Apr 21, 2026
2 checks passed
@ritazh

ritazh commented Apr 22, 2026

Copy link
Copy Markdown
Collaborator

@jeefy perhaps you missed the /hold comment in #79 (comment) we wanted to hold off on merging this PR until we can provide better guidance on the requirements for layered products. #91 was intended to be a WIP PR and waiting on more community input.

Note: this PR along with #91 are unlike typical submissions in 1.35/$distro to be merged by CNCF staff. These are changes to the requirements, guidance, and process to the k8s AI conformance program and therefore, should be discussed in the community and should be approved by the leads.

@jeefy

jeefy commented Apr 22, 2026

Copy link
Copy Markdown
Member

I did miss it because there wasn't a hold label on it. 🙃 I'll revert.

@ritazh

ritazh commented Apr 23, 2026

Copy link
Copy Markdown
Collaborator

Since this was accidentally merged, add comments and feedback to #95 to clarify what a layered product built on an existing conformant distribution must demonstrate independently.

Since this may affect how the community interprets eligibility and certification scope, it would benefit from broader discussion. If you have input, please comment on #95 or join the next AI Conformance project meetings

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants