feat: add PriorityClassName, GoMemLimit(Ratio), ExtendedResourceClaimAllocation for v0.1.2

.changes/unreleased/Added-20260805-142800.yaml

@@ -0,0 +1,2 @@
+kind: Added
+body: Add PriorityClassName, GoMemLimit(Ratio) and ExtendedResourceClaimAllocation types

.changes/unreleased/added-20260906-120848.yaml

@@ -0,0 +1,3 @@
+kind: Added
+body: |-
+  Add FIPSOnly, InPlacePodResize, and PodGroup minMember=0 support

config/crd/kai.scheduler_configs.yaml

@@ -71,6 +71,27 @@ spec:
                     description: GPUSharing enables GPU sharing functionality for
                       the admission service
                     type: boolean
+                  inPlacePodResize:
+                    description: InPlacePodResize configures in-place pod resize (KEP-1287)
+                      behaviour.
+                    properties:
+                      blockUpsizeOnBoundedQueues:
+                        description: |-
+                          BlockUpsizeOnBoundedQueues rejects any upsize on a queue (or ancestor)
+                          that has a finite CPU or memory limit, regardless of current allocation.
+                          This prevents concurrent-resize races from exceeding hard limits.
+                          Disabled by default; enable only when strict race-free enforcement is
+                          required and best-effort checks are insufficient.
+                          Has no effect when ValidateQuota is false.
+                        type: boolean
+                      validateQuota:
+                        description: |-
+                          ValidateQuota enables best-effort hierarchical queue quota checks on
+                          pods/resize requests. When false, the webhook admits all resizes without
+                          checking queue limits or quota, and BlockUpsizeOnBoundedQueues is ignored.
+                          Defaults to true.
+                        type: boolean
+                    type: object
                   mutatingWebhookConfigurationName:
                     description: MutatingWebhookConfigurationName is the name of the
                       MutatingWebhookConfiguration for the admission service
@@ -3995,6 +4016,13 @@ spec:
                           type: string
                       type: object
                     type: array
+                  fipsOnly:
+                    description: |-
+                      FIPSOnly sets GODEBUG=fips140=only on every KAI container, enforcing FIPS 140-3 mode
+                      at runtime instead of just using FIPS-built images. This can panic at runtime if any
+                      non-approved cryptographic algorithm is used - see
+                      https://go.dev/doc/security/fips140#the-fips140-godebug-option.
+                    type: boolean
                   imagesPullSecret:
                     description: |-
                       Deprecated: ImagePullSecret defines a single container registry secret credential.
@@ -4028,6 +4056,11 @@ spec:
                     description: PodLabelSelector filters pods for webhooks and pod
                       grouper
                     type: object
+                  priorityClassName:
+                    description: |-
+                      PriorityClassName defines the priority class for KAI operators & services.
+                      An empty value leaves the pods without a priority class.
+                    type: string
                   queueLabelKey:
                     description: QueueLabelKey specifies the pod label key whose value
                       will be the queue name of the pod.

config/crd/kai.scheduler_schedulingshards.yaml

@@ -81,6 +81,22 @@ spec:
                     * Only valid flags defined in the scheduler's flag set will be accepted
                     * Duplicated flags will override the behavior of flags generated by other fields
                 type: object
+              goMemLimit:
+                anyOf:
+                - type: integer
+                - type: string
+                description: GoMemLimit overrides automatic cgroup-derived GOMEMLIMIT
+                  for this shard.
+                pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                x-kubernetes-int-or-string: true
+              goMemLimitRatio:
+                description: |-
+                  GoMemLimitRatio is the fraction of the scheduler container memory limit
+                  applied as GOMEMLIMIT. Defaults to 0.9.
+                exclusiveMinimum: true
+                maximum: 1
+                minimum: 0
+                type: number
               kValue:
                 description: KValue specifies the kValue for the proportion plugin.
                   Default is 1.0.