milvus-operator
milvus-operator copied to clipboard
Support setting the security context and pod topology spread constraints for Milvus components
For security reasons, we use Kyverno's admission controller on our cluster to ensure that certain Linux capabilities are dropped and that containers run as non-root, along with other policies. While we can change the security contexts of the components using the Bitnami Helm charts (etcd, Kafka, etc.) we are unable to do this for MinIO and the Milvus components.
In addition, in order to improve resiliency, we would like to be able to set Pod Topology Spread Constraints for the same components.
This is a feature request to expose these through the Milvus CRD.