Files
cozystack/internal/gpu/webhook
Aleksei Sviridkin d0aa92af63 feat(cozystack-controller): serve the GPU webhooks with GPU enabled
With gpu.enabled the chart passes the GPU flags, serves the three GPU
admission webhooks with a cert-manager certificate, and exposes the
controller's metrics over HTTPS, where each scrape is authorised
through the token and access reviews the controller is granted.

The webhooks fail closed, so the controller runs two replicas spread
over nodes, under a disruption budget, and a replica is ready only
once the caches the webhooks read have synced. The pod webhook selects
virt-launcher pods with claim references and leaves migration targets
out, which KubeVirt deletes when they stay pending.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>
2026-10-26 13:16:19 +03:00
..