Skip to content

Commit 62217af

Browse files
Review feedback
1 parent bb5edef commit 62217af

1 file changed

Lines changed: 6 additions & 2 deletions

File tree

website/blog/releases/v1.3.0.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -90,9 +90,13 @@ Spice.ai adopts the latest minus one DataFusion release for quality assurance an
9090

9191
## Breaking Changes
9292

93-
The container image now runs as a non-root user and includes minimal dependencies for a slimmer, more secure image. Standard Linux tools like `bash` are no longer included. Kubernetes deployments will require using the v1.3.0 Helm chart, which includes a `securityContext` to ensure that the sandbox user has access to the necessary files.
93+
The container image now always runs as a non-root user (UID/GID 65534) with minimal dependencies, resulting in a smaller, more secure image. Standard Linux tools, including `bash`, are no longer included.
9494

95-
Kubernetes deployments that do not use the v1.3.0 Helm chart will need to add the following `securityContext` to their pod spec:
95+
**Kubernetes Deployments**:
96+
97+
- Use of the v1.3.0+ Helm chart is required, which includes a `securityContext` ensuring the sandbox user has required file access.
98+
99+
- For deployments using a lower version than the v1.3.0 Helm chart, add the following `securityContext` to the pod specification:
96100

97101
```yaml
98102
securityContext:

0 commit comments

Comments
 (0)