seldon-core
seldon-core copied to clipboard
How to set allowPrivilegeEscalation: false for seldon-v2-runtime core components?
The Deployments of the core components, created via
helm install seldon-v2-runtime seldon-charts/seldon-core-v2-runtime --namespace seldon-mesh --set pipelinegateway.disable=true --set dataflow.disable=true
are not able to create the Pods because our gatekeeper requires containers to have allowPrivilegeEscalation: false. Otherwise our ReplicaSets throw an error. For example:
Privilege escalation container is not allowed: hodometer
We can patch them manually to make it work but this does not seem like a good solution:
kubectl patch replicaset -n seldon-mesh hodometer-6b788cfccf -p='{
"spec": {
"template": {
"spec": {
"containers": [
{
"name": "hodometer",
"securityContext": {
"allowPrivilegeEscalation": false
}
}
]
}
}
}
}'
We would like to set this via Helm - is it possible?