Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP Add default securityContent and podSecurityContext values #17

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

WIP Add default securityContent and podSecurityContext values #17

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0467627
Updated frontend template to use appropriate variable from values.yaml
bradfordcp Dec 4, 2024
0cc65de
Added default securityContext and podSecurityContext values to suppor…
bradfordcp Dec 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions charts/langflow-ide/templates/frontend-deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ spec:
containers:
- name: {{ .Chart.Name }}
securityContext:
{{- toYaml .Values.langflow.securityContext | nindent 12 }}
{{- toYaml .Values.langflow.frontend.securityContext | nindent 12 }}
image: "{{ .Values.langflow.frontend.image.repository }}:{{ .Values.langflow.frontend.image.tag | default .Values.langflow.global.image.tag | default .Chart.AppVersion }}"
imagePullPolicy: {{ .Values.langflow.frontend.image.pullPolicy | default .Values.langflow.global.image.pullPolicy }}
ports:
Expand All @@ -67,15 +67,15 @@ spec:
initialDelaySeconds: {{ .Values.langflow.frontend.probe.initialDelaySeconds }}
periodSeconds: {{ .Values.langflow.frontend.probe.periodSeconds }}
timeoutSeconds: {{ .Values.langflow.frontend.probe.timeoutSeconds }}
failureThreshold: {{ .Values.langflow.frontend.probe.failureThreshold }}
failureThreshold: {{ .Values.langflow.frontend.probe.failureThreshold }}
readinessProbe:
httpGet:
path: /index.html
port: http
initialDelaySeconds: {{ .Values.langflow.frontend.probe.initialDelaySeconds }}
periodSeconds: {{ .Values.langflow.frontend.probe.periodSeconds }}
timeoutSeconds: {{ .Values.langflow.frontend.probe.timeoutSeconds }}
failureThreshold: {{ .Values.langflow.frontend.probe.failureThreshold }}
failureThreshold: {{ .Values.langflow.frontend.probe.failureThreshold }}
env:
- name: BACKEND_URL
value: "http://{{ template "langflow.fullname" . }}-backend.{{ .Release.Namespace }}.svc.cluster.local:{{ .Values.langflow.backend.service.port }}"
Expand Down
51 changes: 34 additions & 17 deletions charts/langflow-ide/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,15 +66,23 @@ langflow:
prometheus.io/port: "9090"
prometheus.io/path: "/metrics"

securityContext: {}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
readOnlyRootFilesystem: true
runAsUser: 1000
runAsNonRoot: true
runAsGroup: 1000

podSecurityContext:
fsGroup: 1000
runAsUser: 1000
runAsNonRoot: true
runAsGroup: 1000

podSecurityContext: {}

externalDatabase:
# Compose in the SQLAlchemy format: https://docs.sqlalchemy.org/en/20/core/engines.html#database-urls
Expand Down Expand Up @@ -133,7 +141,7 @@ langflow:
# superuserPassword: <superuser password>
# secretKey: <encryption key, optional>
# newUserIsActive: true|false

frontend:
enabled: true
replicaCount: 1
Expand Down Expand Up @@ -162,14 +170,23 @@ langflow:

affinity: {}
podAnnotations: {}
podSecurityContext: {}
securityContext: {}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000

securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
readOnlyRootFilesystem: true
runAsUser: 1000
runAsNonRoot: true
runAsGroup: 1000

podSecurityContext:
fsGroup: 1000
runAsUser: 1000
runAsNonRoot: true
runAsGroup: 1000

secretProvider:
enabled: false
Expand Down
27 changes: 17 additions & 10 deletions charts/langflow-runtime/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,16 +31,23 @@ serviceAccount:
podAnnotations: {}
podLabels: {}

podSecurityContext: {}
# fsGroup: 2000

securityContext: {}
# capabilities:
# drop:
# - ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
readOnlyRootFilesystem: true
runAsUser: 1000
runAsNonRoot: true
runAsGroup: 1000

podSecurityContext:
fsGroup: 1000
runAsUser: 1000
runAsNonRoot: true
runAsGroup: 1000

env:
- name: LANGFLOW_LOG_LEVEL
value: "INFO"
Expand Down
Loading