feat: add support for CPUCFSQuota

pkg/apis/crds/karpenter.sh_machines.yaml

@@ -58,6 +58,10 @@ spec:
                     description: ContainerRuntime is the container runtime to be used
                       with your worker nodes.
                     type: string
+                  cpuCFSQuota:
+                    description: CPUCFSQuota enables CPU CFS quota enforcement for
+                      containers that specify CPU limits.
+                    type: boolean
                   evictionHard:
                     additionalProperties:
                       type: string

pkg/apis/crds/karpenter.sh_provisioners.yaml

@@ -67,6 +67,10 @@ spec:
                     description: ContainerRuntime is the container runtime to be used
                       with your worker nodes.
                     type: string
+                  cpuCFSQuota:
+                    description: CPUCFSQuota enables CPU CFS quota enforcement for
+                      containers that specify CPU limits.
+                    type: boolean
                   evictionHard:
                     additionalProperties:
                       type: string

pkg/apis/v1alpha5/machine.go

@@ -101,6 +101,9 @@ type KubeletConfiguration struct {
 	// +kubebuilder:validation:Maximum:=100
 	// +optional
 	ImageGCLowThresholdPercent *int32 `json:"imageGCLowThresholdPercent,omitempty"`
+	// CPUCFSQuota enables CPU CFS quota enforcement for containers that specify CPU limits.
+	// +optional
+	CPUCFSQuota bool `json:"cpuCFSQuota,omitempty"`
 }
 
 type ProviderRef struct {

pkg/apis/v1alpha5/suite_test.go

@@ -480,5 +480,13 @@ var _ = Describe("Validation", func() {
 				Expect(provisioner.Validate(ctx)).ToNot(Succeed())
 			})
 		})
+		Context("CPUCFSQuota", func() {
+			It("should succeed on CPUCFSQuota with valid value", func() {
+				provisioner.Spec.KubeletConfiguration = &KubeletConfiguration{
+					CPUCFSQuota: *ptr.Bool(true),
+				}
+				Expect(provisioner.Validate(ctx)).To(Succeed())
+			})
+		})
 	})
 })