Files
cozystack/api
Aleksei Sviridkin 52a37f0fa8 feat(tenant): add the vGPU entitlement, keep GPU budgets out of quotas
A vGPU class may be ordered only by an entitled tenant, and no tenant
may grant itself the entitlement. The Tenant field gpu.vgpu is set by
the parent's administrator, so the effective value is the field and the
parent's value together, and it reaches the namespace as the
namespace.cozystack.io/vgpu label. The label is always written, so only
"true" entitles and a missing label cannot be read as consent.
_namespace.vgpu is written only when entitled, since every app in the
tenant reads that Secret and an always-present key would upgrade them
all.

gpu.cozystack.io/* budget keys are checked against GPUClaim orders, not
pods, so they are dropped before the ResourceQuota render, and a tenant
with only GPU budgets gets no ResourceQuota or LimitRange.

Assisted-by: LLM
Signed-off-by: Aleksei Sviridkin <f@lex.la>
2026-10-23 03:52:27 +03:00
..