fix: correct fsGroup configuration in various deployments (#974)

* fix: invalid fsGroup config in vllm chart * fix: invalid fsGroup config in whisper chart * fix: invalid fsGroup config in text-embeddings chart * fix: invalid fsGroup config in llama chart * fix: invalid fsGroup config in various job manifests * fix: invalid fsGroup config in api chart * fix: invalid fsGroup config in repeater chart
defenseunicorns · Sep 3, 2024 · 86766db · 86766db
1 parent c191b54
commit 86766db
Show file tree

Hide file tree

Showing 13 changed files with 11 additions and 13 deletions.
diff --git a/packages/api/chart/templates/api/deployment.yaml b/packages/api/chart/templates/api/deployment.yaml
@@ -72,7 +72,6 @@ spec:
           securityContext:
             runAsUser: 65532
             runAsGroup: 65532
-            fsGroup: 65532
           volumeMounts:
           - name: api-model
             mountPath: /config

diff --git a/packages/api/chart/templates/migration-job.yaml b/packages/api/chart/templates/migration-job.yaml
@@ -31,6 +31,7 @@ spec:
         securityContext:
           runAsUser: {{ .Values.image.securityContext.runAsUser }}
           runAsGroup: {{ .Values.image.securityContext.runAsGroup }}
-          fsGroup: {{ .Values.image.securityContext.fsGroup }}
+      securityContext:
+        fsGroup: {{ .Values.image.securityContext.fsGroup }}
       restartPolicy: Never
   backoffLimit: 4
diff --git a/packages/llama-cpp-python/chart/templates/deployment.yaml b/packages/llama-cpp-python/chart/templates/deployment.yaml
@@ -33,7 +33,6 @@ spec:
           securityContext:
             runAsUser: 65532
             runAsGroup: 65532
-            fsGroup: 65532
           # This command looks for the Zarf "data injection marker" which is a timestamped file that is injected after everything else and marks the injection as complete.
           command:
             [

diff --git a/packages/llama-cpp-python/chart/values.yaml b/packages/llama-cpp-python/chart/values.yaml
@@ -19,11 +19,11 @@ podAnnotations: {}
 
 podSecurityContext:
   runAsNonRoot: true
+  fsGroup: 65532
 
 securityContext:
   runAsUser: 65532
   runAsGroup: 65532
-  fsGroup: 65532
 
 service:
   type: ClusterIP

diff --git a/packages/repeater/chart/values.yaml b/packages/repeater/chart/values.yaml
@@ -19,11 +19,11 @@ podAnnotations: {}
 
 podSecurityContext:
   runAsNonRoot: true
+  fsGroup: 65532
 
 securityContext:
   runAsUser: 65532
   runAsGroup: 65532
-  fsGroup: 65532
 
 service:
   type: ClusterIP

diff --git a/packages/supabase/migrationChart/templates/migration-job.yaml b/packages/supabase/migrationChart/templates/migration-job.yaml
@@ -31,6 +31,7 @@ spec:
         securityContext:
           runAsUser: {{ .Values.leapfrogai.securityContext.runAsUser }}
           runAsGroup: {{ .Values.leapfrogai.securityContext.runAsGroup }}
-          fsGroup: {{ .Values.leapfrogai.securityContext.fsGroup }}
+      securityContext:
+        fsGroup: {{ .Values.leapfrogai.securityContext.fsGroup }}
       restartPolicy: Never
   backoffLimit: 4
diff --git a/packages/text-embeddings/chart/templates/deployment.yaml b/packages/text-embeddings/chart/templates/deployment.yaml
@@ -38,7 +38,6 @@ spec:
           securityContext:
             runAsUser: 65532
             runAsGroup: 65532
-            fsGroup: 65532
           # This command looks for the Zarf "data injection marker" which is a timestamped file that is injected after everything else and marks the injection as complete.
           command:
             [

diff --git a/packages/text-embeddings/chart/values.yaml b/packages/text-embeddings/chart/values.yaml
@@ -19,11 +19,11 @@ podAnnotations: {}
 
 podSecurityContext:
   runAsNonRoot: true
+  fsGroup: 65532
 
 securityContext:
   runAsUser: 65532
   runAsGroup: 65532
-  fsGroup: 65532
 
 service:
   type: ClusterIP

diff --git a/packages/ui/chart/templates/ui/migration-job.yaml b/packages/ui/chart/templates/ui/migration-job.yaml
@@ -31,6 +31,7 @@ spec:
         securityContext:
           runAsUser: {{ .Values.image.securityContext.runAsUser }}
           runAsGroup: {{ .Values.image.securityContext.runAsGroup }}
-          fsGroup: {{ .Values.image.securityContext.fsGroup }}
+      securityContext:
+        fsGroup: {{ .Values.image.securityContext.fsGroup }}
       restartPolicy: Never
   backoffLimit: 4
diff --git a/packages/vllm/chart/templates/deployment.yaml b/packages/vllm/chart/templates/deployment.yaml
@@ -34,7 +34,6 @@ spec:
           securityContext:
             runAsUser: 65532
             runAsGroup: 65532
-            fsGroup: 65532
           # This command looks for the Zarf "data injection marker" which is a timestamped file that is injected after everything else and marks the injection as complete.
           command:
             [

diff --git a/packages/vllm/chart/values.yaml b/packages/vllm/chart/values.yaml
@@ -19,11 +19,11 @@ podAnnotations: {}
 
 podSecurityContext:
   runAsNonRoot: true
+  fsGroup: 65532
 
 securityContext:
   runAsUser: 65532
   runAsGroup: 65532
-  fsGroup: 65532
 
 service:
   type: ClusterIP

diff --git a/packages/whisper/chart/templates/deployment.yaml b/packages/whisper/chart/templates/deployment.yaml
@@ -38,7 +38,6 @@ spec:
           securityContext:
             runAsUser: 65532
             runAsGroup: 65532
-            fsGroup: 65532
           # This command looks for the Zarf "data injection marker" which is a timestamped file that is injected after everything else and marks the injection as complete.
           command:
             [

diff --git a/packages/whisper/chart/values.yaml b/packages/whisper/chart/values.yaml
@@ -19,11 +19,11 @@ podAnnotations: {}
 
 podSecurityContext:
   runAsNonRoot: true
+  fsGroup: 65532
 
 securityContext:
   runAsUser: 65532
   runAsGroup: 65532
-  fsGroup: 65532
 
 service:
   type: ClusterIP