HAMi Enterprise 2.10.0-r2

This page records changes from HAMi Enterprise v2.10.0-r1 to v2.10.0-r2. The resource-pool controller and CRDs are packaged in separate Charts and are not installed automatically by the main Chart.

Item	Version
Enterprise release date	2026-09-18
Main Chart hami-enterprise	2.10.0-r2
Main Chart appVersion	2.10.0-r2
Optional CRD Chart hami-enterprise-crds	0.4.2, appVersion: 0.4.0
Optional resource-pool manager Chart hami-resource-pool-manager	0.0.4, appVersion: 0.0.1

Software changes

• Optional resource-pool management: Adds separately delivered resource-pool CRDs and a management component to manage NVIDIA and Ascend device usage by resource pool and namespace binding. The main Chart still installs only the scheduler and device plugins. Once the management component is enabled, new in-scope workloads in non-exempt namespaces require a resource-pool binding. Upgrading the main Chart does not enable resource pools in an existing HAMi installation.
• Runtime memory adjustment for Ascend vNPUs: A workload using hami-core mode can explicitly set NPU_MEMORY_AUTO_ADJUST=true to request additional memory when its allocation exceeds the current limit. The scheduler checks available physical-device memory and namespace quota. The feature only increases the allocation; it does not automatically reduce it or modify the Pod's initial resource request. If a request is denied or times out, the original allocation may still result in OOM. This feature requires a compatible Ascend device plugin and libvnpu runtime; see below for enablement requirements.
• Device licensing and Ascend startup: The NVIDIA device plugin rereads node license information during subsequent allocations so it does not keep using stale cached data after renewal. The scheduler also publishes Ascend device license information to nodes. hami-core workloads are no longer injected with a PostStart hook that starts a separate limiter; the companion runtime now uses an embedded management mechanism.

Chart changes

• OpenShift deployment options: Adds platform.openshift, platform.openshiftVersion, and openshift.securityContextConstraints to select an OpenShift scheduler image and create or reference the SCC used by the device plugin. selinux.enabled can relabel the shared vGPU host directory. These options are disabled by default. When using the built-in privileged SCC, set openshift.securityContextConstraints.create=false and verify the target cluster's security policies.
• NVIDIA NUMA refit configuration: Adds the disabled-by-default devicePlugin.numaRefit.enabled and scheduler endpoint, TLS, and CA options. Enabling it also requires devicePlugin.enableNumaTopology, PreferredAllocation on nodes, and the hami.io/numa-alignment annotation on workloads. Setting only numaRefit.enabled does not automatically reselect devices for every task based on NUMA topology.
• Scheduler listening port: The container listening port is now controlled by scheduler.service.httpTargetPort; the default changes from 443/80 to 9443. The scheduler configuration and Service target port rendered by the Chart change accordingly. Update network policies, probes, or external integrations that directly depend on the old container port.
• Webhook certificate patch image: For Kubernetes 1.22 and later, the default scheduler.patch.imageNew changes from liangjw/kube-webhook-certgen:v1.1.1 to registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.9. This avoids an older image dropping matchConditions when updating webhook objects. Update image mappings if you use a proxy or offline registry.
• NVIDIA node deployment: The device plugin now tolerates the nvidia.com/gpu:NoSchedule taint by default. When devicePlugin.nvidiaDriverRoot is configured, the monitor container also mounts that driver root.

Upgrade notes

• Enabling resource pools: The management component requires Kubernetes 1.30 or later and extender scheduling rather than DRA. Install the separate CRD Chart first, then install the management Chart in the namespace containing the existing scheduler device ConfigMap. Set hami.existingConfigMap and the actual schedulerName. To manage Ascend workloads, also set hami.ascendEnabled=true in the management Chart (disabled by default); this is separate from the main Chart's devices.ascend.enabled setting. The packaged defaults in management Chart 0.0.4 still point to the old main image ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r1; explicitly override it with the released standalone management image ghcr.io/dynamia-ai/resource-pool-manager:v0.0.1. Plan resource-pool bindings before enabling it. Management-component quotas do not replace device memory or compute-capacity checks.
• Enabling Ascend memory auto-adjustment: Use hami-core mode, allocate only one vNPU per workload container, and explicitly set NPU_MEMORY_AUTO_ADJUST=true. In the main Chart, set devices.ascend.enabled=true (disabled by default) and scheduler.admissionWebhook.enabled=true, disable DRA, and use Kubernetes 1.30 or later. Enabling only the scheduler webhook without the Ascend device setting does not create the validation webhook required for memory adjustment; runtime request protection therefore remains disabled. When upgrading from an environment that relies on a separate limiter, verify the Ascend plugin and libvnpu runtime versions instead of assuming the old startup-hook behavior still applies.
• Using OpenShift options: Verify the target OpenShift version, SCC permissions, SELinux labels, and image-pull permissions before enabling the corresponding values. These options remain disabled by default and do not need changes on a standard Kubernetes cluster.

Obtain the package and images through the agreed delivery channel. See the Chart and appVersion mapping.

Values reference

The following parameter descriptions are taken from the README bundled with the Chart 2.10.0-r2 release package and are preserved as published. Use this version's values.yaml as the source of default configuration.

Expand values table

Key	Type	Default	Description
birenResourceName	string	"birentech.com/gpu"	Biren GPU resource name
dcuResourceCores	string	"hygon.com/dcucores"	Hygon DCU cores resource name
dcuResourceMem	string	"hygon.com/dcumem"	Hygon DCU memory resource name
dcuResourceName	string	"hygon.com/dcunum"	Hygon DCU resource name
device-config.content	string	""
devicePlugin.cdiVendor	string	""	CDI vendor for generated specs and device annotations (default: k8s.device-plugin.nvidia.com)
devicePlugin.createRuntimeClass	bool	false	Whether to create runtime class
devicePlugin.deviceCoreScaling	int	1	Device core scaling factor
devicePlugin.deviceListStrategy	string	"envvar"	Device list strategy. Supported values: envvar, volume-mounts, cdi-annotations
devicePlugin.deviceMemoryScaling	int	1	Device memory scaling factor
devicePlugin.deviceSplitCount	int	10	Number of slices to split each GPU into
devicePlugin.disablecorelimit	string	"false"	Disable core limit
devicePlugin.enableNumaTopology	bool	false	Advertise the physical GPU's NUMA node on each vGPU replica
devicePlugin.enabled	bool	true	Enable device plugin
devicePlugin.extraArgs	list	["-v=4"]	Extra arguments for device plugin
devicePlugin.extraEnvs	object	{}	Extra environment variables for device plugin
devicePlugin.gdrcopyEnabled	bool	false	Enable GDRCopy
devicePlugin.gdsEnabled	bool	false	Enable GDS
devicePlugin.gpuOperatorToolkitReady.enabled	bool	false	Enable GPU operator toolkit ready check
devicePlugin.gpuOperatorToolkitReady.hostPath	string	"/run/nvidia/validations"	Host path for GPU operator toolkit ready check
devicePlugin.gpuOperatorToolkitReady.securityContext	object	{"privileged":true,"runAsUser":0}	Security context for the GPU operator toolkit validation init container
devicePlugin.hostNetwork	bool	false	Share the host network namespace with the device plugin pod
devicePlugin.hostPID	bool	true	Share the host PID namespace with the device plugin pod
devicePlugin.image.pullPolicy	string	"IfNotPresent"	Device plugin image pull policy
devicePlugin.image.pullSecrets	list	[]	Specify docker-registry secret names as an array
devicePlugin.image.registry	string	"ghcr.io"	Device plugin image registry
devicePlugin.image.repository	string	"dynamia-ai/hami-enterprise"	Device plugin image repository
devicePlugin.image.tag	string	""	Device plugin image tag (immutable tags are recommended)
devicePlugin.libPath	string	"/usr/local/vgpu"	Library path for vGPU
devicePlugin.migStrategy	string	"none"	MIG strategy. Supported values: none, single, mixed
devicePlugin.mofedEnabled	bool	false	Enable Mellanox OFED
devicePlugin.monitor.ctrPath	string	"/usr/local/vgpu/containers"	Container path for monitor
devicePlugin.monitor.extraArgs	list	["-v=4"]	Extra arguments for monitor
devicePlugin.monitor.extraEnvs	object	{}	Extra environment variables for monitor
devicePlugin.monitor.image.pullPolicy	string	"IfNotPresent"	Monitor image pull policy
devicePlugin.monitor.image.pullSecrets	list	[]	Specify docker-registry secret names as an array
devicePlugin.monitor.image.registry	string	"ghcr.io"	Monitor image registry
devicePlugin.monitor.image.repository	string	"dynamia-ai/hami-enterprise"	Monitor image repository
devicePlugin.monitor.image.tag	string	""	Monitor image tag (immutable tags are recommended)
devicePlugin.monitor.resources	object	{}	Resources for monitor container
devicePlugin.monitor.resyncInterval	string	"5m"	Resync interval for monitor
devicePlugin.monitor.securityContext	object	{"allowPrivilegeEscalation":false,"capabilities":{"add":["SYS_ADMIN"],"drop":["ALL"]}}	Security context for the monitor container
devicePlugin.nodeConfiguration.config	string	"{\n \"nodeconfig\": [\n {\n \"name\": \"your-node-name\",\n \"operatingmode\": \"hami-core\",\n \"devicememoryscaling\": 1,\n \"devicesplitcount\": 10,\n \"preconfigureddevicememory\": 0,\n \"enablenumatopology\": false,\n \"migstrategy\": \"none\",\n \"filterdevices\": {\n \"uuid\": [],\n \"index\": []\n },\n \"enablegetpreferredallocation\": false\n }\n ]\n}\n"	Node configuration for device plugin. If set, overrides the default config.json
devicePlugin.nodeConfiguration.externalConfigName	string	""	Name of an existing ConfigMap to use for node configuration
devicePlugin.numaRefit	object	{"caFile":"","caSecret":"","enabled":false,"schedulerEndpoint":"","tlsInsecure":true}	NUMA alignment refit configuration
devicePlugin.numaRefit.caFile	string	""	Path to a CA bundle already mounted in the device-plugin Pod
devicePlugin.numaRefit.caSecret	string	""	Secret containing ca.crt, mounted at /etc/hami/numa-refit-ca
devicePlugin.numaRefit.enabled	bool	false	Enable NUMA alignment refit
devicePlugin.numaRefit.schedulerEndpoint	string	""	Scheduler base URL override. Defaults to the in-cluster Scheduler service
devicePlugin.numaRefit.tlsInsecure	bool	true	Skip Scheduler TLS verification. Set false with caFile or caSecret to verify TLS
devicePlugin.nvidiaDriverRoot	string	""	NVIDIA driver root on the host, mounted into the device plugin and monitor containers
devicePlugin.nvidiaHookPath	string	""	Path for NVIDIA hook
devicePlugin.nvidiaNodeSelector	object	{"gpu":"on"}	Node selector for NVIDIA device plugin
devicePlugin.passDeviceSpecsEnabled	bool	false	Enable passing device specs
devicePlugin.pluginPath	string	"/var/lib/kubelet/device-plugins"	Path for device plugin socket
devicePlugin.podAnnotations	object	{}	Annotations for device plugin pod
devicePlugin.preConfiguredDeviceMemory	int	0	Pre-configured device memory in MB for GPUs that don't support memory query. Set to 0 for auto-detection
devicePlugin.resources	object	{}	Resources for device plugin container
devicePlugin.runtimeClassName	string	""	Runtime class name to be used by the device plugin
devicePlugin.securityContext	object	{"allowPrivilegeEscalation":true,"capabilities":{"add":["SYS_ADMIN"],"drop":["ALL"]},"privileged":true}	Security context for the device plugin container
devicePlugin.service.annotations	object	{}	Annotations for device plugin service
devicePlugin.service.httpPort	int	31992	HTTP port for device plugin service
devicePlugin.service.labels	object	{}	Labels for device plugin service
devicePlugin.service.type	string	"NodePort"	Service type for device plugin
devicePlugin.tolerations	list	[{"effect":"NoSchedule","key":"nvidia.com/gpu","operator":"Exists"}]	Tolerations for device plugin pod
devicePlugin.updateStrategy.rollingUpdate.maxUnavailable	int	1	Maximum unavailable pods during update
devicePlugin.updateStrategy.type	string	"RollingUpdate"	Update strategy for device plugin DaemonSet
devices.alibaba.customresources	list	["alibaba.com/ppu","alibaba.com/ppu-memory","alibaba.com/gpu-core"]	Custom resource definitions for Alibaba devices
devices.alibaba.enabled	bool	true	Enable Alibaba PPU device
devices.alibaba.ppuCorePolicy	string	"default"	PPU core policy for Alibaba devices
devices.amd.customresources	list	["amd.com/gpu","amd.com/gpumem","amd.com/gpucores"]	Custom resource definitions for AMD devices
devices.ascend.customresources	list	["huawei.com/Ascend910A","huawei.com/Ascend910A-memory","huawei.com/Ascend910A-core","huawei.com/Ascend910B2","huawei.com/Ascend910B2-memory","huawei.com/Ascend910B2-core","huawei.com/Ascend910B3","huawei.com/Ascend910B3-memory","huawei.com/Ascend910B3-core","huawei.com/Ascend910B4","huawei.com/Ascend910B4-memory","huawei.com/Ascend910B4-core","huawei.com/Ascend910B4-1","huawei.com/Ascend910B4-1-memory","huawei.com/Ascend910B4-1-core","huawei.com/Ascend310P","huawei.com/Ascend310P-memory","huawei.com/Ascend310P-core","huawei.com/Ascend910C","huawei.com/Ascend910C-memory","huawei.com/Ascend910C-core"]	Custom resource definitions for Ascend devices
devices.ascend.enabled	bool	false	Enable Ascend device plugin
devices.ascend.extraArgs	list	[]	Extra arguments for Ascend device plugin
devices.ascend.hamiVnpuCore	bool	false	Enable soft-partitioning based on hami-vnpu-core (node-level annotation takes higher priority)
devices.ascend.image	string	""	Ascend device plugin image
devices.ascend.imagePullPolicy	string	"IfNotPresent"	Image pull policy for Ascend device plugin
devices.ascend.nodeSelector	object	{"ascend":"on"}	Node selector for Ascend device plugin
devices.ascend.runtimeClassName	string	""	Runtime class name for Ascend NPU pods
devices.ascend.tolerations	list	[]	Tolerations for Ascend device plugin
devices.awsneuron.customresources	list	["aws.amazon.com/neuron","aws.amazon.com/neuroncore"]	Custom resource definitions for AWS Neuron devices
devices.biren.customresources	list	["birentech.com/gpu"]	Custom resource definitions for Biren devices
devices.biren.enabled	bool	true	Enable Biren device plugin
devices.enflame.customresources	list	["enflame.com/drs-gcu","enflame.com/gcu-memory","enflame.com/gcu-core","enflame.com/gcu","enflame.com/vgcu","enflame.com/vgcu-percentage"]	Custom resource definitions for Enflame devices
devices.enflame.enabled	bool	true	Enable Enflame device plugin
devices.iluvatar.customresources	list	["iluvatar.ai/BI-V100-vgpu","iluvatar.ai/BI-V100.vCore","iluvatar.ai/BI-V100.vMem","iluvatar.ai/BI-V150-vgpu","iluvatar.ai/BI-V150.vCore","iluvatar.ai/BI-V150.vMem","iluvatar.ai/MR-V100-vgpu","iluvatar.ai/MR-V100.vCore","iluvatar.ai/MR-V100.vMem","iluvatar.ai/MR-V50-vgpu","iluvatar.ai/MR-V50.vCore","iluvatar.ai/MR-V50.vMem"]	Custom resource definitions for Iluvatar devices
devices.iluvatar.enabled	bool	false	Enable Iluvatar device plugin
devices.kunlun.customresources	list	["kunlunxin.com/xpu","kunlunxin.com/vxpu","kunlunxin.com/vxpu-memory"]	Custom resource definitions for Kunlun devices
devices.kunlun.enabled	bool	true	Enable Kunlun device plugin
devices.mthreads.customresources	list	["mthreads.com/vgpu"]	Custom resource definitions for MThreads devices
devices.mthreads.enabled	bool	true	Enable MThreads device plugin
devices.nvidia.gpuCorePolicy	string	"default"	GPU core policy for NVIDIA devices
devices.nvidia.libCudaLogLevel	int	2	libCUDA log level
devices.vastai.customresources	list	["vastaitech.com/va"]	Custom resource definitions for Vastai devices
devices.vastai.enabled	bool	true	Enable Vastai device plugin
dra.enabled	bool	false	Enable DRA (Dynamic Resource Allocation)
enflameResourceNameDRSGCU	string	"enflame.com/drs-gcu"	Enflame DRS GCU resource name
enflameResourceNameGCUCore	string	"enflame.com/gcu-core"	Enflame GCU core resource name
enflameResourceNameGCUMemory	string	"enflame.com/gcu-memory"	Enflame GCU memory resource name
enflameResourceNameVGCU	string	"enflame.com/vgcu"	Enflame VGCU resource name
enflameResourceNameVGCUPercentage	string	"enflame.com/vgcu-percentage"	Enflame VGCU percentage resource name
fullnameOverride	string	""	Override the fullname of the chart
global.annotations	object	{}	Global annotations to add to all resources
global.gpuHookPath	string	"/usr/local"	Path for GPU hook installation on nodes
global.imagePullSecrets	list	[]	Global Docker image pull secrets
global.imageRegistry	string	""	Global Docker image registry
global.imageTag	string	"v2.10.0-r1"	Global image tag for HAMi Enterprise components
global.labels	object	{}	Global labels to add to all resources
global.managedNodeSelector	object	{"usage":"gpu"}	Node selector configuration for managed GPU nodes
global.managedNodeSelectorEnable	bool	false	Enable managed node selector for GPU nodes
hami-dra.drivers.nvidia.containerDriver	bool	true	Enable container driver for NVIDIA DRA
hami-dra.drivers.nvidia.enabled	bool	true	Enable NVIDIA DRA driver
hami-dra.drivers.nvidia.image.repository	string	"ghcr.io/project-hami/k8s-dra-driver"	NVIDIA DRA driver image repository
hami-dra.drivers.nvidia.image.tag	string	"main"	NVIDIA DRA driver image tag
hami-dra.monitor.enabled	bool	true	Enable monitor for hami-dra
kunlunResourceName	string	"kunlunxin.com/xpu"	Kunlun XPU resource name
kunlunResourceVCountName	string	"kunlunxin.com/vxpu"	Kunlun virtual XPU count resource name
kunlunResourceVMemoryName	string	"kunlunxin.com/vxpu-memory"	Kunlun virtual XPU memory resource name
legacyMetrics	bool	false	Enable legacy metrics
metaxResourceCore	string	"metax-tech.com/vcore"	Metax sGPU core resource name
metaxResourceMem	string	"metax-tech.com/vmemory"	Metax sGPU memory resource name
metaxResourceName	string	"metax-tech.com/sgpu"	Metax sGPU resource name
metaxsGPUTopologyAware	string	"false"	Enable Metax sGPU topology awareness
mluResourceCores	string	"cambricon.com/mlu.smlu.vcore"	MLU cores resource name
mluResourceMem	string	"cambricon.com/mlu.smlu.vmemory"	MLU memory resource name
mluResourceName	string	"cambricon.com/vmlu"	MLU resource name
mockDevicePlugin.enabled	bool	false	Enable mock device plugin
mockDevicePlugin.image.pullPolicy	string	"IfNotPresent"	Mock device plugin image pull policy
mockDevicePlugin.image.pullSecrets	list	[]	Specify docker-registry secret names as an array
mockDevicePlugin.image.registry	string	"docker.io"	Mock device plugin image registry
mockDevicePlugin.image.repository	string	"projecthami/mock-device-plugin"	Mock device plugin image repository
mockDevicePlugin.image.tag	string	"1.0.1"	Mock device plugin image tag
nameOverride	string	""	Override the chart name
namespaceOverride	string	""	Override the namespace
openshift.securityContextConstraints.create	bool	true	Create the named device-plugin SCC and its use ClusterRole when OpenShift support is enabled. Set this to false only when both the SCC and system:openshift:scc:<name> ClusterRole already exist, such as for the built-in privileged SCC.
openshift.securityContextConstraints.name	string	"hami-device-plugin"	SCC granted to enabled device-plugin service accounts. When create=false, the matching system:openshift:scc:<name> ClusterRole must already exist. The built-in privileged SCC requires create=false.
platform.openshift	bool	false	Enable OpenShift-specific resources and handling
platform.openshiftVersion	string	""	OpenShift version used to resolve the Red Hat OpenShift hyperkube image tag when platform.openshift=true and scheduler.kubeScheduler.image.tag is empty
podSecurityPolicy.enabled	bool	false	Enable PodSecurityPolicy
prometheus.enabled	bool	false	Enable Prometheus metrics
resourceCores	string	"nvidia.com/gpucores"	NVIDIA GPU cores resource name
resourceMem	string	"nvidia.com/gpumem"	NVIDIA GPU memory resource name
resourceMemPercentage	string	"nvidia.com/gpumem-percentage"	NVIDIA GPU memory percentage resource name
resourceName	string	"nvidia.com/gpu"	NVIDIA GPU resource name
resourcePriority	string	"nvidia.com/priority"	NVIDIA GPU priority resource name
scheduler.admissionWebhook.customURL.enabled	bool	false	Enable custom webhook URL
scheduler.admissionWebhook.customURL.host	string	"127.0.0.1"	Webhook host (must be an endpoint using https)
scheduler.admissionWebhook.customURL.path	string	"/webhook"	Webhook path
scheduler.admissionWebhook.customURL.port	int	31998	Webhook port
scheduler.admissionWebhook.enabled	bool	true	Enable admission webhook. If disabled, pods must be configured with correct schedulerName manually
scheduler.admissionWebhook.failurePolicy	string	"Ignore"	Failure policy for webhook
scheduler.admissionWebhook.manageNamespaceSelector	bool	true	Whether the chart renders and manages the webhook's namespaceSelector field
scheduler.admissionWebhook.namespaceSelector	object	{"matchExpressions":[],"matchLabels":{}}	Namespace selector for webhook
scheduler.admissionWebhook.objectSelector	object	{"matchExpressions":[]}	Object selector for webhook
scheduler.admissionWebhook.reinvocationPolicy	string	"Never"	Reinvocation policy for webhook
scheduler.admissionWebhook.whitelistNamespaces	list	[]	Namespaces that the webhook will not be applied to
scheduler.certManager.enabled	bool	false	Enable cert-manager for TLS certificate generation
scheduler.defaultSchedulerPolicy.gpuSchedulerPolicy	string	"spread"	GPU-level scheduling policy. Supported values: binpack, spread
scheduler.defaultSchedulerPolicy.nodeSchedulerPolicy	string	"binpack"	Node-level scheduling policy. Supported values: binpack, spread
scheduler.extender.extraArgs	list	["--debug","-v=4"]	Extra arguments for scheduler extender
scheduler.extender.image.pullPolicy	string	"IfNotPresent"	Scheduler extender image pull policy
scheduler.extender.image.pullSecrets	list	[]	Specify docker-registry secret names as an array
scheduler.extender.image.registry	string	"ghcr.io"	Scheduler extender image registry
scheduler.extender.image.repository	string	"dynamia-ai/hami-enterprise"	Scheduler extender image repository
scheduler.extender.image.tag	string	""	Scheduler extender image tag (immutable tags are recommended)
scheduler.extender.resources	object	{}	Resources for scheduler extender container
scheduler.forceOverwriteDefaultScheduler	bool	true	Force overwrite the default scheduler name in pods when it equals the K8s default scheduler name
scheduler.kubeScheduler.enabled	bool	true	Whether to run kube-scheduler container in the scheduler pod
scheduler.kubeScheduler.extraArgs	list	["--policy-config-file=/config/config.json","-v=4"]	Extra arguments for kube-scheduler (legacy config format)
scheduler.kubeScheduler.extraNewArgs	list	["--config=/config/config.yaml","-v=4"]	Extra arguments for kube-scheduler (new config format)
scheduler.kubeScheduler.image.pullPolicy	string	"IfNotPresent"	kube-scheduler image pull policy
scheduler.kubeScheduler.image.pullSecrets	list	[]	Specify docker-registry secret names as an array
scheduler.kubeScheduler.image.registry	string	"registry.cn-hangzhou.aliyuncs.com"	kube-scheduler image registry
scheduler.kubeScheduler.image.repository	string	"google_containers/kube-scheduler"	kube-scheduler image repository
scheduler.kubeScheduler.image.tag	string	""	kube-scheduler image tag (immutable tags are recommended)
scheduler.kubeScheduler.resources	object	{}	Resources for kube-scheduler container
scheduler.leaderElect	bool	true	Enable leader election for scheduler
scheduler.livenessProbe	bool	false	Enable liveness probe for scheduler
scheduler.metricsBindAddress	string	":9395"	Address to bind metrics server
scheduler.nodeLockExpire	string	"5m"	Node lock expiration time
scheduler.nodeName	string	""	Node name for scheduler pod. If installing as default scheduler, set this to skip the schedule workflow
scheduler.overwriteEnv	string	"false"	Overwrite environment variables
scheduler.patch.enabled	bool	true	Enable kube-webhook-certgen patch job
scheduler.patch.image.pullPolicy	string	"IfNotPresent"	kube-webhook-certgen image pull policy
scheduler.patch.image.pullSecrets	list	[]	Specify docker-registry secret names as an array
scheduler.patch.image.registry	string	"docker.io"	kube-webhook-certgen image registry
scheduler.patch.image.repository	string	"jettech/kube-webhook-certgen"	kube-webhook-certgen image repository
scheduler.patch.image.tag	string	"v1.5.2"	kube-webhook-certgen image tag
scheduler.patch.imageNew.pullPolicy	string	"IfNotPresent"	Kubernetes 1.22+ kube-webhook-certgen image pull policy
scheduler.patch.imageNew.pullSecrets	list	[]	Specify docker-registry secret names as an array
scheduler.patch.imageNew.registry	string	"registry.k8s.io"	Kubernetes 1.22+ kube-webhook-certgen image registry
scheduler.patch.imageNew.repository	string	"ingress-nginx/kube-webhook-certgen"	Kubernetes 1.22+ kube-webhook-certgen image repository
scheduler.patch.imageNew.tag	string	"v1.6.9"	Kubernetes 1.22+ kube-webhook-certgen image tag
scheduler.patch.nodeSelector	object	{}	Node selector for patch job
scheduler.patch.podAnnotations	object	{}	Annotations for patch job pod
scheduler.patch.priorityClassName	string	""	Priority class name for patch job
scheduler.patch.runAsUser	int	2000	User ID to run patch job as. OpenShift omits this value at render time so its SCC can allocate an allowed UID
scheduler.patch.tolerations	list	[]	Tolerations for patch job
scheduler.podAnnotations	object	{}	Annotations for scheduler pod
scheduler.replicas	int	1	Number of scheduler replicas (only effective when leaderElect is true)
scheduler.service.annotations	object	{}	Annotations for scheduler service
scheduler.service.httpPort	int	443	HTTP port for scheduler service
scheduler.service.httpTargetPort	int	9443	Target port on which the scheduler extender listens
scheduler.service.labels	object	{}	Labels for scheduler service
scheduler.service.monitorPort	int	31993	Monitoring port for scheduler service
scheduler.service.monitorTargetPort	int	9395	Target port for monitoring
scheduler.service.schedulerPort	int	31998	NodePort for scheduler HTTP
scheduler.service.type	string	"NodePort"	Service type for scheduler
scheduler.tolerations	list	[]	Tolerations for scheduler pod
scheduler.useDownward	bool	true	Whether to enable useDownward in the generated scheduler device config for NVIDIA devices
schedulerName	string	"hami-scheduler"	Name of the scheduler
selinux.enabled	bool	false	Relabel shared vGPU host directories on SELinux-enabled Kubernetes nodes
selinux.level	string	"s0"	SELinux level applied to shared vGPU host directories
selinux.type	string	"container_file_t"	SELinux type applied to shared vGPU host directories
vastaiResourceName	string	"vastaitech.com/va"	Vastai resource name