[myasnikovdaniil]

Guides imported in #648 kept receiving edits in docs/ of cozystack repo after the copy was made, so pages here lag behind. This carries those edits over to next/ only, the code they describe is in release-1.7 and not on release-1.6.

One of them fixes a wrong claim: vgpu page said a hand-written cozystack.gpu-operator or cozystack.kubevirt Package CR takes precedence over the bundle render, but the next render replaces it, so both names have to go to bundles.disabledPackages.

cozystack/cozystack#3780 deletes the originals in docs/, so this has to land first.

[netlify]

✅ Deploy Preview for cozystack ready!

Name	Link
🔨 Latest commit	13e1c8e
🔍 Latest deploy log	https://app.netlify.com/projects/cozystack/deploys/6ad8645b85264c0f247b7f10
😎 Deploy Preview	https://deploy-preview-754--cozystack.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: ed9ef5dd-94eb-4776-bbf3-b3c43776a54a

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[IvanHunters]

LGTM.

Verified the technical claims against the chart sources in cozystack/cozystack rather than the operator guide:

• kubernetes/oidc-authentication.md — the new "Aggregated API servers" section matches packages/apps/kubernetes/templates/cluster.yaml: the version table (--requestheader-uid-headers=X-Remote-Uid only once the effective minor is ≥ 1.33), "the chart never renders --feature-gates itself", the three conditions that suppress the render (effective ≤ v1.32, a quoted --emulated-version, two kube --emulated-version entries), and every refusal case (empty list element, a trailing valueless flag swallowing --authentication-config, a patch-level --emulated-version, the --oidc-* / --authentication-config collisions).
• networking/vm-external-vlan.md — netplanDhcp: true does render en*/eth* DHCP under the cozy-en / cozy-eth netplan IDs, so 10-netplan-cozy-en.network sorts before (and shadows) a per-interface file. The netplanDhcp-off guidance is correct.
• virtualization/vgpu.md — the precedence correction is right: the iaas bundle re-emits cozystack.kubevirt and cozystack.gpu-operator on every render and replaces a hand-written Package CR, so the name has to go into bundles.disabledPackages. The defaults gating (replaceDefaults, vgpuDeviceManager.enabled) matches the bundle template.
• The authentication.oidc.realmName path (default cozy) exists as documented.

One non-blocking note: the "Aggregated API servers" section is dense — a few of the longest sentences would scan better split up. Not a merge blocker.

[IvanHunters]

LGTM. Faithful port of the operator-guide edits into next/, and the technical claims hold up when checked against the code rather than against the docs they describe.

What I verified independently:

• RemoteRequestHeaderUID timeline. The published Kubernetes feature-gate pages still list this gate as Alpha/1.32, which would contradict the page. The authoritative source is VersionedSpecs in staging/src/k8s.io/apiserver/pkg/features/kube_features.go, and on release-1.33 through release-1.35 and master it reads 1.32 Alpha default=false, 1.33 Beta default=true. So "beta and on by default from v1.33", the v1.32 alpha-and-off row, and "no flag on v1.31" are all correct. The website docs are simply ahead of the k8s doc tables here.
• KubeVirt #16890. The v1.9.0 changelog carries it ("PCI device plugin now supports passing of pre-setup VF (vGPU)"), and kubevirt-operator on release-1.7 pins virt-operator:v1.9.0, so "v1.9.0 or newer, which is the release the platform bundles" checks out.
• vGPU precedence fix. The corrected claim (a hand-written cozystack.gpu-operator / cozystack.kubevirt Package CR does not win over the bundle and has to go into bundles.disabledPackages) matches the iaas bundle's render behaviour.
• Config keys exist. authentication.oidc.realmName (default cozy in packages/core/platform/values.yaml), netplanDhcp and the cozy-en / cozy-eth netplan IDs, gpu.replaceDefaults and gpu.vgpuDeviceManager.enabled (both default false), and --requestheader-uid-headers in packages/apps/kubernetes/templates/cluster.yaml.
• Links and anchors. #gotchas and #profile-assignment-sr-iov-path resolve, and the reworked vGPU cross-reference points at the caution block that actually explains why the mdev table is empty by default, which reads better than the old "note below".

No blocking findings and nothing to nit. One sequencing note, already in the PR description: cozystack/cozystack#3780 removes the originals under docs/, so this needs to land first.