mirror of
https://github.com/clearml/clearml-helm-charts
synced 2025-01-31 17:16:47 +00:00
85 lines
2.1 KiB
YAML
Executable File
85 lines
2.1 KiB
YAML
Executable File
# These values are for ENTERPRISE version only and they need to be adapted to specific infrastructure needs
|
|
# containerSecurityContext is highly related to Kubernetes distribution used/configuration and will probably
|
|
# need to be customized accordingly
|
|
|
|
apiserver:
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
fileserver:
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
webserver:
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
enterpriseFeatures:
|
|
enabled: true
|
|
clearmlApplications:
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
containerCustomBashScript: |
|
|
export HOME=/tmp ;
|
|
export LOCAL_PYTHON=python3 ;
|
|
$LOCAL_PYTHON -m pip install clearml-agent{agent_install_args} ;
|
|
$LOCAL_PYTHON -m clearml_agent execute {default_execution_agent_args} --id {task_id}
|
|
extraEnvs:
|
|
- name: CLEARML_K8S_GLUE_START_AGENT_SCRIPT_PATH
|
|
value: /tmp/__start_agent__.sh
|
|
- name: HOME
|
|
value: /tmp
|
|
|
|
redis:
|
|
master:
|
|
containerSecurityContext:
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
mongodb:
|
|
containerSecurityContext:
|
|
enabled: true
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
elasticsearch:
|
|
sysctlInitContainer:
|
|
enabled: false
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop: ["ALL"]
|
|
seccompProfile:
|
|
type: RuntimeDefault
|