mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-10 06:24:09 +09:00
Aleksei Sviridkin
d0aa92af63
With gpu.enabled the chart passes the GPU flags, serves the three GPU admission webhooks with a cert-manager certificate, and exposes the controller's metrics over HTTPS, where each scrape is authorised through the token and access reviews the controller is granted. The webhooks fail closed, so the controller runs two replicas spread over nodes, under a disruption budget, and a replica is ready only once the caches the webhooks read have synced. The pod webhook selects virt-launcher pods with claim references and leaves migration targets out, which KubeVirt deletes when they stay pending. Assisted-by: LLM Signed-off-by: Aleksei Sviridkin <f@lex.la>
29 lines
1.4 KiB
YAML
29 lines
1.4 KiB
YAML
cozystackController:
|
|
image: ghcr.io/cozystack/cozystack/cozystack-controller:v1.6.0@sha256:b01f6fe6e8fe6426b112fbda2b4abac946b4e45cd118137c9001c9e6ee784b3d
|
|
debug: false
|
|
disableTelemetry: false
|
|
# Base URL of a Prometheus-compatible query API to fetch SeaweedFS bucket
|
|
# size metrics from, for deployments where SeaweedFS and the monitoring
|
|
# stack that scrapes it run in a separate cluster. Empty keeps discovery
|
|
# via the namespace.cozystack.io/monitoring label.
|
|
seaweedfsMetricsEndpoint: ""
|
|
# Raising this gives the reconciliation loop a standby, not a second writer:
|
|
# the chart always passes --leader-elect, so exactly one manager holds the
|
|
# Lease and runs the reconcilers. With the default of 1 the extra Lease is
|
|
# the only difference from the previous hardcoded value.
|
|
replicas: 1
|
|
# Empty by default: no resources block is rendered, so requests and limits are
|
|
# opt-in. Idle usage (measured) is ~69Mi — keep a limit above that.
|
|
resources: {}
|
|
# GPUClaim placement and its admission webhooks. The platform enables it
|
|
# only where KubeVirt serves GPUs; it then runs two replicas, since the
|
|
# webhooks fail closed and would block GPU VM starts during a rollout.
|
|
gpu:
|
|
enabled: false
|
|
# Hoster's gpu.resourceNames: GPU resource names besides those of
|
|
# GPUClasses and node agents.
|
|
resourceNames: []
|
|
# allowed or forbidden: whether VMs and pods may request GPU resource
|
|
# names directly.
|
|
rawResourceNames: allowed
|