quickwit-oss / helm-charts

Helm charts for Quickwit
https://helm.quickwit.io
MIT License
22 stars 28 forks source link

feat: runtimeClassName annotation support so we can support gVisor (GKE Sandbox) #100

Closed isaachall closed 1 week ago

isaachall commented 1 month ago

This adds the runtimeClassName annotation to Deployments, Jobs, and StatefulSets so the containers can run within GKE Sandbox (gVisor). This helps with PCI compliance.

values.yaml:

searcher:
  runtimeClassName: gvisor

indexer:
  runtimeClassName: gvisor

metastore:
  runtimeClassName: gvisor

control_plane:
  runtimeClassName: gvisor

janitor:
  runtimeClassName: gvisor

bootstrap:
  runtimeClassName: gvisor
guilload commented 1 week ago

@isaachall, do you mind resolving the conflict and bumping the chart's version to 0.7.3 so we can merge this PR?

isaachall commented 1 week ago

@guilload Conflict resolved & version bumped. I just finished testing the update on my cluster. Thanks!