milvus-operator icon indicating copy to clipboard operation
milvus-operator copied to clipboard

Support setting the security context and pod topology spread constraints for Milvus components

Open bcbrockway opened this issue 7 months ago • 4 comments

For security reasons, we use Kyverno's admission controller on our cluster to ensure that certain Linux capabilities are dropped and that containers run as non-root, along with other policies. While we can change the security contexts of the components using the Bitnami Helm charts (etcd, Kafka, etc.) we are unable to do this for MinIO and the Milvus components.

In addition, in order to improve resiliency, we would like to be able to set Pod Topology Spread Constraints for the same components.

This is a feature request to expose these through the Milvus CRD.

bcbrockway avatar Jul 01 '24 08:07 bcbrockway