NVIDIA · omer-dayan · Mar 23, 2025 · Mar 23, 2025 · Mar 23, 2025 · Mar 23, 2025
diff --git a/deployments/kai-scheduler/templates/binder-webhook.yaml b/deployments/kai-scheduler/templates/binder-webhook.yaml
@@ -21,6 +21,7 @@ webhooks:
     - key: kubernetes.io/metadata.name
       operator: NotIn
       values:
+      - kube-system
       - '{{ .Release.Namespace }}'
   reinvocationPolicy: IfNeeded
   rules:
@@ -54,6 +55,7 @@ webhooks:
     - key: kubernetes.io/metadata.name
       operator: NotIn
       values:
+      - kube-system
       - '{{ .Release.Namespace }}'
   rules:
   - apiGroups:

diff --git a/deployments/kai-scheduler/templates/priorityclasses/build-preemptible.yaml b/deployments/kai-scheduler/templates/priorityclasses/build-preemptible.yaml
@@ -0,0 +1,8 @@
+# Copyright 2025 NVIDIA CORPORATION
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: build-preemptible
+value: 75
diff --git a/deployments/kai-scheduler/templates/priorityclasses/build.yaml b/deployments/kai-scheduler/templates/priorityclasses/build.yaml
@@ -0,0 +1,8 @@
+# Copyright 2025 NVIDIA CORPORATION
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: build
+value: 100
diff --git a/deployments/kai-scheduler/templates/priorityclasses/inference.yaml b/deployments/kai-scheduler/templates/priorityclasses/inference.yaml
@@ -0,0 +1,8 @@
+# Copyright 2025 NVIDIA CORPORATION
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: inference
+value: 125
diff --git a/deployments/kai-scheduler/templates/priorityclasses/train.yaml b/deployments/kai-scheduler/templates/priorityclasses/train.yaml
@@ -0,0 +1,8 @@
+# Copyright 2025 NVIDIA CORPORATION
+# SPDX-License-Identifier: Apache-2.0
+
+apiVersion: scheduling.k8s.io/v1
+kind: PriorityClass
+metadata:
+  name: train
+value: 50
diff --git a/deployments/kai-scheduler/templates/rbac/webhookmanager-binding.yaml b/deployments/kai-scheduler/templates/rbac/webhookmanager-binding.yaml
@@ -6,7 +6,7 @@ kind: ClusterRoleBinding
 metadata:
   name: webhookmanager
   annotations:
-    "helm.sh/hook": pre-install,post-install
+    "helm.sh/hook": pre-install,post-install,pre-upgrade,post-upgrade
     "helm.sh/hook-weight": "-1"
     "helm.sh/hook-delete-policy": hook-succeeded
 subjects:

diff --git a/deployments/kai-scheduler/templates/rbac/webhookmanager.yaml b/deployments/kai-scheduler/templates/rbac/webhookmanager.yaml
@@ -5,7 +5,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   annotations:
-    helm.sh/hook: pre-install,post-install
+    helm.sh/hook: pre-install,post-install,pre-upgrade,post-upgrade
     helm.sh/hook-delete-policy: hook-succeeded
     helm.sh/hook-weight: "-3"
   name: webhookmanager

diff --git a/deployments/kai-scheduler/templates/services/post-install-hook.yaml b/deployments/kai-scheduler/templates/services/post-install-hook.yaml
@@ -8,7 +8,7 @@ metadata:
   labels:
     app: post-install-hook
   annotations:
-    "helm.sh/hook": post-install
+    "helm.sh/hook": post-install,post-upgrade
     "helm.sh/hook-weight": "0"
     "helm.sh/hook-delete-policy": hook-succeeded
 spec:

diff --git a/deployments/kai-scheduler/templates/services/pre-install-hook.yaml b/deployments/kai-scheduler/templates/services/pre-install-hook.yaml
@@ -8,7 +8,7 @@ metadata:
   labels:
     app: pre-install-hook
   annotations:
-    "helm.sh/hook": pre-install
+    "helm.sh/hook": pre-install,pre-upgrade
     "helm.sh/hook-weight": "0"
     "helm.sh/hook-delete-policy": hook-succeeded
 spec:

diff --git a/deployments/kai-scheduler/templates/services/webhookmanager-serviceacount.yaml b/deployments/kai-scheduler/templates/services/webhookmanager-serviceacount.yaml
@@ -6,6 +6,6 @@ kind: ServiceAccount
 metadata:
   name: webhookmanager
   annotations:
-    "helm.sh/hook": pre-install,post-install
+    "helm.sh/hook": pre-install,post-install,pre-upgrade,post-upgrade
     "helm.sh/hook-weight": "-2"
     "helm.sh/hook-delete-policy": hook-succeeded
diff --git a/deployments/kustomization/binder-webhook/mutating-webhook-patch.yaml b/deployments/kustomization/binder-webhook/mutating-webhook-patch.yaml
@@ -17,4 +17,5 @@ webhooks:
         - key: kubernetes.io/metadata.name
           operator: NotIn
           values:
+            - kube-system
             - "{{ .Release.Namespace }}"
diff --git a/deployments/kustomization/binder-webhook/validating-webhook-patch.yaml b/deployments/kustomization/binder-webhook/validating-webhook-patch.yaml
@@ -17,4 +17,5 @@ webhooks:
         - key: kubernetes.io/metadata.name
           operator: NotIn
           values:
+            - kube-system
             - "{{ .Release.Namespace }}"
diff --git a/deployments/kustomization/webhookmanager-clusterrole/patch.yaml b/deployments/kustomization/webhookmanager-clusterrole/patch.yaml
@@ -6,6 +6,6 @@ kind: ClusterRole
 metadata:
   name: webhookmanager
   annotations:
-    "helm.sh/hook": pre-install,post-install
+    "helm.sh/hook": pre-install,post-install,pre-upgrade,post-upgrade
     "helm.sh/hook-weight": "-3"
     "helm.sh/hook-delete-policy": hook-succeeded