Aleksei Sviridkin 9534a5a864 feat(cozystack-basics): let every authenticated user read GPUClass ...

The GPU catalog is what a tenant picks a class from, from a portal or
from kubectl and GitOps without one, so every authenticated user reads
it. GPUClass is cluster-scoped and tenant roles are bound per
namespace, so the read goes through its own ClusterRole bound to
system:authenticated. Nothing grants a write: classes are the
hoster's.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-11-03 05:25:02 +03:00

..

templates

feat(cozystack-basics): let every authenticated user read GPUClass

2026-11-03 05:25:02 +03:00

tests

feat(cozystack-basics): let every authenticated user read GPUClass

2026-11-03 05:25:02 +03:00

Chart.yaml

feat(flux): implement flux sharding for tenant HelmReleases

2026-01-15 14:15:09 +01:00

Makefile

feat: Gateway API support via Cilium

2026-05-25 17:07:02 +03:00

values.yaml

feat(flux): implement flux sharding for tenant HelmReleases

2026-01-15 14:15:09 +01:00