mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
Aleksei Sviridkin
5fa3133505
A VM of a licensed vGPU class mounts its license from a Secret in its own namespace, so the token reaches entitled tenants only and is rotated by a VM restart rather than by rebuilding a shared image. The copier keeps one copy per class in every namespace whose vGPU label is "true", with the token and a gridd.conf carrying the class's FeatureType, and deletes copies the label, the class or its license no longer call for. A missing hoster Secret, or one without the token, keeps the copies already written: deleting them would stop every restarting VM over what is usually a rotation in progress. New copies wait, and the class shows LicenseSecretMissing so the hoster sees why. Only Secrets carrying both the copy's name and the class label are ever written or deleted, so a tenant's own Secret of the same name is left alone. The token is read through the uncached reader and stays out of every cache. Assisted-by: LLM Signed-off-by: Aleksei Sviridkin <f@lex.la>