You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In order to make OPEA deployments easier and more secure the service account (SA) needs to be exposed to deployments. Especially to those accessing the model data (e.g. tgi). In CSP environments (e.g. Google cloud), the model data is often stored in a cloud service (e.g., Google Cloud Storage (gcs)). Pod access to these services are managed via SAs. Special SAs are created and granted access. We don't want to use default SA since it gives all pods access, which is unnecessary.
Currently, there is no way to set the SA for any deployments.
In general, it would be good if all the helm charts settings are based on what comes out from helm create. The settings are there for a reason.
The text was updated successfully, but these errors were encountered:
In order to make OPEA deployments easier and more secure the service account (SA) needs to be exposed to deployments. Especially to those accessing the model data (e.g. tgi). In CSP environments (e.g. Google cloud), the model data is often stored in a cloud service (e.g., Google Cloud Storage (gcs)). Pod access to these services are managed via SAs. Special SAs are created and granted access. We don't want to use
default
SA since it gives all pods access, which is unnecessary.Currently, there is no way to set the SA for any deployments.
In general, it would be good if all the helm charts settings are based on what comes out from
helm create
. The settings are there for a reason.The text was updated successfully, but these errors were encountered: