opea-project / GenAIInfra

Containerization and cloud native suite for OPEA
Apache License 2.0
16 stars 22 forks source link

Helm chart: Add default minimal pod security #133

Closed lianhao closed 5 days ago

lianhao commented 5 days ago

Description

Add default minimal pod security to meet K8S restricted pod security standard.

Rename the helm-chart option global.volume to global.modelUseHostPath. Set it to null or empty value will result the emptyDir type of volumes to be mounted into the container and apply the the pod security as much as possible to meet restricted pod security standard.

Issues

issue #129

Type of change

List the type of change like below. Please delete options that are not relevant.

Dependencies

n/a

Tests

n/a