NVIDIA NIM on EKS AI Conformance for v1.35#79
Conversation
| # AICR is not a Kubernetes distribution — it is an AI runtime layer deployed | ||
| # on existing conformant platforms. This URL references the conformant | ||
| # Kubernetes substrate (EKS) used for evidence collection. | ||
| # Also validated on GKE: https://github.com/cncf/k8s-conformance/tree/master/v1.35/gke |
There was a problem hiding this comment.
AICR has been validated on EKS, GKE, and AKS. AKS support was added and validated in NVIDIA/aicr#415. Note that AICR is platform-agnostic and works on any conformant Kubernetes cluster.
| # AICR is not a Kubernetes distribution — it is an AI runtime layer deployed | ||
| # on existing conformant platforms. This URL references the conformant | ||
| # Kubernetes substrate (EKS) used for evidence collection. | ||
| # Also validated on GKE: https://github.com/cncf/k8s-conformance/tree/master/v1.35/gke | ||
| k8sConformanceUrl: "https://github.com/cncf/k8s-conformance/tree/master/v1.35/eks" |
There was a problem hiding this comment.
I think we'll need the K8s conformance for AICR as a prerequisite. We had to remove "Red Hat OpenShift Service on AWS"'s AI conformance previously due to lack of corresponding K8s conformance #44.
There was a problem hiding this comment.
I think we'll need the K8s conformance for AICR as a prerequisite. We had to remove "Red Hat OpenShift Service on AWS"'s AI conformance previously due to lack of corresponding K8s conformance #44.
The platform certification isn't proposing AICR as a requirement for others. It's NVIDIA certifying its
own configured platform, the same way any other vendor submits their product. No existing conformant platform would need to adopt AICR, and it doesn't change the requirements for anyone else. The validating tools for conformance requirements is a separate topic.
|
@jeefy , can you take a look when you get a chance? Thanks. |
|
xpost from a slack thread for future posterity. Thank you for submitting this PR @yuanchen8911 That said, I’m concerned about merging this PR as-is / right now because it risks effectively introducing “use AICR” as an implied requirement (even if unintentionally). Before we do anything that looks like a requirement shift, I think we need the program/vendor alignment and some bake time like we have done with all existing requirements and processes:
On your proposed next steps: (1) Platform certification (AICR-enabled EKS/GKE/AKS/etc.): Assuming we get enough support for this new requirement as part of the program, then this is a good first step that these vendors can take. |
Thanks, @ritazh! Re 1. What we're proposing to certify is a conformant K8s platform + AICR runtime (recipe). No K8s platform today is AI-conformant on its own, not EKS, GKE, AKS, OKE, or OpenShift. It's always the platform plus additional runtime components (GPU operators, device plugins, NCCL, gang scheduling, etc.) that make it AI-conformant. So what the program actually certifies is a K8s platform plus runtime components, a configured product built on top of a conformant base. Every existing submission follows this pattern. OpenShift bundles the GPU operator stack, Gardener deploys additional components. They just ship it as one branded product. AICR makes this explicit rather than hiding it behind a single product name. From this perspective, "conformant K8s platform + AICR runtime" is a valid platform to certify. To clarify, the platform certification isn't proposing AICR as a requirement for others. It's NVIDIA certifying its own configured platform, the same way any other vendor submits their product. No existing conformant platform would need to adopt AICR, and it doesn't change the requirements for anyone else. We're happy to take the tooling contribution to the subproject community meetings in parallel. But that will requires some substantial discussion and work while the platform submission itself should be straightforward. It's just another vendor certification, not a new requirement or process change. Would it help if we revised the PR t make it a specific base K8s distro (e.g., starting with EKS) + AICR runtime) as a named platform certification to make this distinction more explicit? Re 2. We'll present and discuss the AICR validating tools and plan with the WG in a meeting. |
|
@ritazh, I think we're aligning on the plan. Regarding priority and ordering of certification vs. validation tooling, we're happy to take the tooling contribution to the community meetings in parallel. But that will require substantial discussion and work TBH, while the platform submission is straightforward. It's just another vendor certification, not a new requirement or process change. Please let us know if we can proceed with reworking the PR to certify a specific K8s distro + AICR runtime components (deployment recipes)? Thanks. |
The AI Conformance program does not certify "on its own" outcomes. The pattern is (abstractly):
To use a concrete example, here's the gang scheduling requirement, which describes requirements that accommodate the flexible AI/ML k8s landscape (ref: kubernetes-sigs/ai-conformance#54):
This pattern of platform + apply specific, standard, and repeatable configuration is exactly why a tool like AICR can be a helpful accelerant for the AI Conformant platform ecosystem. :)
Because AICR is not a Kubernetes cluster distro or platform (ref: https://github.com/NVIDIA/aicr/?tab=readme-ov-file#what-ai-cluster-runtime-is-not), it is not something to certify as AI Conformant per se. Similarly, we would not want to certify argo/flux/Cluster API as AI Conformant per se (even though all of these tools can be used for provisioning AI Conformant clusters). I'm very excited that the launch of AICR coincides w/ early days of AI Conformance, as there's great opportunity to collaborate and standardize together! |
|
Per @ritazh's feedback, the CNCF AI Conformance WG requires certifying a product on a K8s platform, not standalone tooling/software. It sounds like an NVIDIA product/service such as NIM on EKS is the right framing. AICR serves as the deployment and validation tooling while NIM is the certified product. Converting this PR to draft while we rework the submission accordingly. |
4d37933 to
65b191a
Compare
|
Hi @ritazh @jackfrancis @jeefy @terrytangyuan @janetkuo @puja108 @dims @mchmarny, Based on our discussion in the Slack thread, we've reworked this PR to certify NVIDIA NIM on EKS as the product, rather than AICR (which is now positioned as deployment/validation tooling only). Key changes:
This PR is ready for review. One open question in the description: Follow-up submissions for NIM on GKE/AKS/OKE are planned. |
3374162 to
c125ebc
Compare
c125ebc to
4f6bf6b
Compare
|
Thanks @jeefy for the clarification — that makes sense. Since NIM sits on top of EKS (which has its own K8s conformance), referencing EKS's conformance results via Also fixed the broken |
Signed-off-by: Yuan Chen <[email protected]>
4f6bf6b to
e448c7a
Compare
|
The documentation request from @dims and @puja108 has been addressed by the now-merged PR #89 (FAQ on certifying products on existing distributions). This submission already follows that guidance — Rebased this branch onto main so the merged FAQ is included. |
|
Thank you for your updates @yuanchen8911 ! I would like to request a hold on this PR until we can provide better guidance on the requirements for layered products. I've opened #91 to clarify what a product built on an existing conformant distribution must demonstrate independently. Since this may affect how the community interprets eligibility and certification scope, it would benefit from broader discussion. If you have input, please comment on #91 or join the next AI Conformance project meetings /hold |
Thanks @ritazh! It will be helpful to align on guidance for layered products. Happy to adjust this submission as needed once the requirements are clarified. Please keep us updated. cc @dims |
|
@jeefy perhaps you missed the Note: this PR along with #91 are unlike typical submissions in 1.35/$distro to be merged by CNCF staff. These are changes to the requirements, guidance, and process to the k8s AI conformance program and therefore, should be discussed in the community and should be approved by the leads. |
|
I did miss it because there wasn't a hold label on it. 🙃 I'll revert. |
|
Since this was accidentally merged, add comments and feedback to #95 to clarify what a layered product built on an existing conformant distribution must demonstrate independently. Since this may affect how the community interprets eligibility and certification scope, it would benefit from broader discussion. If you have input, please comment on #95 or join the next AI Conformance project meetings |
Pre-submission checklist:
Please check each of these after submitting your pull request:
Please confirm that the company or organization submitting a platform for certification accepts and agrees to the Certified Kubernetes AI Platform Conformance Program Terms and Conditions.
Did you include the product/project logo in SVG, EPS or AI format?
Does your logo clearly state the name of your product and follow the participant logo guidelines?
If your product/project is open source, did you include the
repoUrl?For a full list of requirements, please refer to these sections of the docs: Contents of the PR, and Requirements.
NVIDIA NIM on EKS
NVIDIA NIM on EKS is a Kubernetes-based AI inference platform that deploys and manages NVIDIA NIM microservices on Amazon EKS with GPU scheduling, autoscaling, and Gateway API integration. NIM microservice lifecycle is managed by the NIM Operator.
Key distinction: NIM is an AI inference product, not configuration tooling. AICR serves as the deployment and validation tooling (similar to how sonobuoy is used for K8s conformance), while NIM is the certified product. No existing conformant platform needs to adopt AICR — this is NVIDIA certifying its own product on EKS.
Conformance Evidence
All 9 MUST requirements pass, plus 3 SHOULD requirements are implemented:
dra_supportgang_schedulingsecure_accelerator_accessaccelerator_metricsai_service_metricsai_inferencerobust_controllerpod_autoscalingcluster_autoscalingEvidence was collected on an EKS v1.35 cluster with NVIDIA H100 80GB HBM3 GPUs running NIM inference workloads (Llama 3.2 1B via NIMService CR).
How this addresses prior feedback
@ritazh — "certify a product, not tooling":
NIM is the product being certified. AICR is the validation tooling, not the submission target. This follows the same pattern as other submissions where the certified product is a configured platform, not the tooling used to configure it.
@jackfrancis — "AICR is not a K8s cluster distro or platform":
Correct — and we are no longer certifying AICR. NIM on EKS is the product: an AI inference platform that uses the NIM Operator to manage NIM microservice lifecycle on EKS. AICR deployed the runtime components and collected the evidence, but the certified platform is NIM on EKS.
k8sConformanceUrl: For this submission, the certified product is NVIDIA NIM on EKS: an AI inference platform layered on top of Amazon EKS. NIM itself is not a Kubernetes distribution and does not have a separate entry incncf/k8s-conformance, so we currently reference the underlying EKS v1.35 Kubernetes conformance entry to establish the base cluster's Kubernetes conformance. If the AI Conformance WG prefers a different convention for layered products, we're happy to update this field accordingly.Next steps