diff --git a/charts/open-webui/Chart.yaml b/charts/open-webui/Chart.yaml index f67f13e..34520d7 100644 --- a/charts/open-webui/Chart.yaml +++ b/charts/open-webui/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: open-webui -version: 3.0.9 +version: 3.0.10 appVersion: "v0.3.8" home: https://www.openwebui.com/ diff --git a/charts/open-webui/README.md b/charts/open-webui/README.md index 3188f29..48546ec 100644 --- a/charts/open-webui/README.md +++ b/charts/open-webui/README.md @@ -1,6 +1,6 @@ # open-webui -![Version: 3.0.9](https://img.shields.io/badge/Version-3.0.9-informational?style=flat-square) ![AppVersion: v0.3.8](https://img.shields.io/badge/AppVersion-v0.3.8-informational?style=flat-square) +![Version: 3.0.10](https://img.shields.io/badge/Version-3.0.10-informational?style=flat-square) ![AppVersion: v0.3.8](https://img.shields.io/badge/AppVersion-v0.3.8-informational?style=flat-square) Open WebUI: A User-Friendly Web Interface for Chat Interactions 👋 @@ -42,6 +42,7 @@ helm upgrade --install open-webui open-webui/open-webui | affinity | object | `{}` | Affinity for pod assignment | | annotations | object | `{}` | | | clusterDomain | string | `"cluster.local"` | Value of cluster domain | +| containerSecurityContext | object | `{}` | Configure container security context ref: | | extraEnvVars | list | `[{"name":"OPENAI_API_KEY","value":"0p3n-w3bu!"}]` | Additional environments variables on the output Deployment definition. Most up-to-date environment variables can be found here: https://docs.openwebui.com/getting-started/env-configuration/ | | extraEnvVars[0] | object | `{"name":"OPENAI_API_KEY","value":"0p3n-w3bu!"}` | Default API key value for Pipelines. Should be updated in a production deployment, or be changed to the required API key if not using Pipelines | | image | object | `{"pullPolicy":"Always","repository":"ghcr.io/open-webui/open-webui","tag":"latest"}` | Open WebUI image tags can be found here: https://github.com/open-webui/open-webui/pkgs/container/open-webui | @@ -67,6 +68,7 @@ helm upgrade --install open-webui open-webui/open-webui | pipelines.enabled | bool | `true` | Automatically install Pipelines chart to extend Open WebUI functionality using Pipelines: https://github.com/open-webui/pipelines | | pipelines.extraEnvVars | list | `[]` | This section can be used to pass required environment variables to your pipelines (e.g. Langfuse hostname) | | podAnnotations | object | `{}` | | +| podSecurityContext | object | `{}` | Configure pod security context ref: | | replicaCount | int | `1` | | | resources | object | `{}` | | | service | object | `{"annotations":{},"containerPort":8080,"labels":{},"loadBalancerClass":"","nodePort":"","port":80,"type":"ClusterIP"}` | Service values to expose Open WebUI pods to cluster | diff --git a/charts/open-webui/templates/workload-manager.yaml b/charts/open-webui/templates/workload-manager.yaml index cbaf7cf..0cba2db 100644 --- a/charts/open-webui/templates/workload-manager.yaml +++ b/charts/open-webui/templates/workload-manager.yaml @@ -31,6 +31,10 @@ spec: spec: enableServiceLinks: false automountServiceAccountToken: false + {{- with .Values.podSecurityContext }} + securityContext: + {{- toYaml . | nindent 8 }} + {{- end }} containers: - name: {{ .Chart.Name }} {{- with .Values.image }} @@ -43,6 +47,10 @@ spec: {{- with .Values.resources }} resources: {{- toYaml . | nindent 10 }} {{- end }} + {{- with .Values.containerSecurityContext }} + securityContext: + {{- toYaml . | nindent 10 }} + {{- end }} volumeMounts: - name: data mountPath: /app/backend/data @@ -87,4 +95,4 @@ spec: - name: data persistentVolumeClaim: claimName: {{ include "open-webui.name" . }} - {{- end }} \ No newline at end of file + {{- end }} diff --git a/charts/open-webui/values.yaml b/charts/open-webui/values.yaml index d5d0cde..75ff562 100644 --- a/charts/open-webui/values.yaml +++ b/charts/open-webui/values.yaml @@ -19,7 +19,7 @@ ollama: pipelines: # -- Automatically install Pipelines chart to extend Open WebUI functionality using Pipelines: https://github.com/open-webui/pipelines - enabled: true + enabled: true # -- This section can be used to pass required environment variables to your pipelines (e.g. Langfuse hostname) extraEnvVars: [] @@ -97,3 +97,28 @@ extraEnvVars: # key: api-key # - name: OLLAMA_DEBUG # value: "1" + +# -- Configure pod security context +# ref: +podSecurityContext: + {} + # fsGroupChangePolicy: Always + # sysctls: [] + # supplementalGroups: [] + # fsGroup: 1001 + +# -- Configure container security context +# ref: +containerSecurityContext: + {} + # runAsUser: 1001 + # runAsGroup: 1001 + # runAsNonRoot: true + # privileged: false + # allowPrivilegeEscalation: false + # readOnlyRootFilesystem: false + # capabilities: + # drop: + # - ALL + # seccompProfile: + # type: "RuntimeDefault"