treewide: bump supported vCPU count to kernel maximum of 220

Author: charludo

cli/verifier/cpu_count_valid.go

@@ -15,7 +15,7 @@ import (
 // CPUCountValid verifies that all workloads have a valid vCPU count.
 type CPUCountValid struct{}
 
-// Verify checks that pods do not require more than the currently supported 8 vCPUs.
+// Verify checks that pods do not require more than the currently supported 220 vCPUs.
 func (v *CPUCountValid) Verify(toVerify any) error {
 	var findings error
 
@@ -25,9 +25,9 @@ func (v *CPUCountValid) Verify(toVerify any) error {
 		}
 
 		cpuCount := kuberesource.GetPodCPUCount(spec)
-		if cpuCount < 1 || cpuCount > 8 {
+		if cpuCount < 1 || cpuCount > 220 {
 			// TODO(charludo): find way to add pod name to error message
-			findings = errors.Join(findings, fmt.Errorf("pod failed verification: currently only 0-7 additional vCPUs are supported (1-8 vCPUs in total), but %d were requested", cpuCount))
+			findings = errors.Join(findings, fmt.Errorf("pod failed verification: currently only 1-220 vCPUs are supported, but %d were requested", cpuCount))
 		}
 
 		return spec

cli/verifier/cpu_count_valid_test.go

@@ -62,7 +62,7 @@ spec:
         - name: app
           resources:
             limits:
-              cpu: "8" # invalid because of always-added CPU
+              cpu: "220" # invalid because of always-added CPU
 `
 
 func TestCPUCountValid(t *testing.T) {

docs/docs/architecture/components/manifest.md

@@ -132,6 +132,7 @@ It covers the guest firmware, the initrd and kernel as well as the kernel comman
 The kernel command line contains the dm-verity hash of the root filesystem, which contains all Contrast components that run inside the guest.
 
 It's the (launch) `MEASUREMENT` from the SNP `ATTESTATION_REPORT`, according to Table 23 in the [SEV ABI Spec].
+Contrast is able to extrapolate from this single-vCPU measurement to those for up to 220 vCPUs.
 
 ### `ReferenceValues.snp.*.MinimumTCB` {#snp-minimum-tcb}
 

docs/docs/howto/workload-deployment/deployment-file-preparation.md

@@ -196,7 +196,7 @@ Altogether, setting the limit to 10x the compressed image size should be suffici
 :::warning
 
 Each Contrast pod requires one CPU by default.
-Containers may request additional CPUs, up to a total of 8 CPUs per pod.
+Containers may request additional CPUs, up to a total of 220 CPUs per pod.
 Please note that fractional CPU requests are always rounded up to the nearest whole number, meaning a Pod with one container requesting 0.2 CPUs will require 2 CPUs in total.
 
 :::

tools/vale/styles/config/vocabularies/edgeless/accept.txt

@@ -187,7 +187,7 @@ URIs?
 userland
 UUID
 validators?
-vCPU
+vCPUs?
 vendored
 virsh
 virtualized