From a61a25f212984a2159fd211fa934d1bf667da2d2 Mon Sep 17 00:00:00 2001 From: Lianhao Lu Date: Thu, 12 Dec 2024 11:07:36 +0000 Subject: [PATCH] tgi: loosen securityContext constraints Fix issue #639 Signed-off-by: Lianhao Lu --- helm-charts/common/tgi/templates/configmap.yaml | 1 + helm-charts/common/tgi/values.yaml | 8 ++++---- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/helm-charts/common/tgi/templates/configmap.yaml b/helm-charts/common/tgi/templates/configmap.yaml index 82be971e4..0b7385870 100644 --- a/helm-charts/common/tgi/templates/configmap.yaml +++ b/helm-charts/common/tgi/templates/configmap.yaml @@ -19,6 +19,7 @@ data: no_proxy: {{ .Values.global.no_proxy | quote }} {{- if contains "tgi-gaudi" .Values.image.repository }} HABANA_LOGS: "/tmp/habana_logs" + TRITON_CACHE_DIR: "/tmp/triton_cache" {{- end }} NUMBA_CACHE_DIR: "/tmp" HF_HOME: "/tmp/.cache/huggingface" diff --git a/helm-charts/common/tgi/values.yaml b/helm-charts/common/tgi/values.yaml index dff938e65..39494a13e 100644 --- a/helm-charts/common/tgi/values.yaml +++ b/helm-charts/common/tgi/values.yaml @@ -53,10 +53,10 @@ podSecurityContext: {} # fsGroup: 2000 securityContext: - readOnlyRootFilesystem: true - allowPrivilegeEscalation: false - runAsNonRoot: true - runAsUser: 1000 + #readOnlyRootFilesystem: true + #allowPrivilegeEscalation: false + #runAsNonRoot: true + #runAsUser: 1000 capabilities: drop: - ALL