From 3507ebd7f04734e4b1c20ab08a9a73e7dd113d41 Mon Sep 17 00:00:00 2001
From: Artur Kamalov <artur.kamalov@akvelon.us>
Date: Tue, 2 Sep 2025 12:52:30 +0200
Subject: [PATCH] add gke-related changes

---
 .../helm-chart/ai-starter-kit/values-gke.yaml             | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/ai/ai-starter-kit/helm-chart/ai-starter-kit/values-gke.yaml b/ai/ai-starter-kit/helm-chart/ai-starter-kit/values-gke.yaml
index b875fae0..be0a8e42 100644
--- a/ai/ai-starter-kit/helm-chart/ai-starter-kit/values-gke.yaml
+++ b/ai/ai-starter-kit/helm-chart/ai-starter-kit/values-gke.yaml
@@ -5,7 +5,6 @@ jupyterhub:
   fullnameOverride:
 
   singleuser:
-    fsGid: 100
     defaultUrl: "/lab/tree/welcome.ipynb"
     image:
       name: jupyterhub/k8s-singleuser-sample
@@ -101,6 +100,9 @@ jupyterhub:
             key: token
       RAY_ADDRESS: "ai-starter-kit-kuberay-head-svc:6379"
       MLFLOW_TRACKING_URI: "http://ai-starter-kit-mlflow-tracking"
+    cloudMetadata:
+      # Without this disabled, the GKE Autopilot Warden will raise an error about container with escalated privilieges
+      blockWithIptables: false
   hub:
     db:
       type: sqlite-pvc
@@ -114,6 +116,10 @@ jupyterhub:
         c.DummyAuthenticator.password = "sneakypass"
       01-spawner-timeouts: |
         c.KubeSpawner.start_timeout = 1800
+  scheduling:
+    userScheduler:
+      # For now we disable the scheduler because GKE Autopilot Warden does not allow using of a custom scheduler
+      enabled: false
 
 ray-cluster:
   image: