Dalton Alvarenga
8a6b954b32
All checks were successful
CD / build (pull_request) Successful in 4m47s
A imagem passou a rodar non-root (uid/gid 10001), mas o overlay de lab não tinha securityContext/fsGroup — os dirs do PVC (chroma_db, data_storage) ficavam root:root e a escrita do ChromaDB/CSV falhava com Permission denied (pod subia e /health respondia, mas query quebraria). Alinha o lab ao hml: - pod securityContext runAsNonRoot + runAsUser/Group/fsGroup 10001 - container: allowPrivilegeEscalation:false, drop ALL - HOME=/home/app e cache ONNX montado em /home/app/.cache/chroma Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| deployment.yaml | ||
| ingress.yaml | ||
| pvc.yaml | ||
| service.yaml | ||