[PR #293] [MERGED] feat!: allow redis security context on container level #310

Closed
opened 2026-02-15 19:17:19 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/helm-charts/pull/293
Author: @fvivian
Created: 9/4/2025
Status: Merged
Merged: 9/4/2025
Merged by: @westbrook-ai

Base: mainHead: feature/redis-read-only-filesystem


📝 Commits (2)

  • 1aa2fa0 WIP use different security contexts for websocket deployment spec and container spec
  • 4b99029 feat!: allow redis security context on container level

📊 Changes

4 files changed (+28 additions, -7 deletions)

View changed files

📝 charts/open-webui/Chart.yaml (+1 -1)
📝 charts/open-webui/README.md (+4 -3)
📝 charts/open-webui/templates/websocket-redis.yaml (+15 -1)
📝 charts/open-webui/values.yaml (+8 -2)

📄 Description

securityContext could only be set on pod level, not container level. So a read only root filesystem could not be
set.

In addition, if readOnlyRootFilesystem is set, mount an emptyDir at /data for redis to have write access.


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/helm-charts/pull/293 **Author:** [@fvivian](https://github.com/fvivian) **Created:** 9/4/2025 **Status:** ✅ Merged **Merged:** 9/4/2025 **Merged by:** [@westbrook-ai](https://github.com/westbrook-ai) **Base:** `main` ← **Head:** `feature/redis-read-only-filesystem` --- ### 📝 Commits (2) - [`1aa2fa0`](https://github.com/open-webui/helm-charts/commit/1aa2fa032d7a5fd5f4a3f5c0071ad4dd42e166fb) WIP use different security contexts for websocket deployment spec and container spec - [`4b99029`](https://github.com/open-webui/helm-charts/commit/4b99029bc9cc78c70085d6e9fb30faeaddfa0e15) feat!: allow redis security context on container level ### 📊 Changes **4 files changed** (+28 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `charts/open-webui/Chart.yaml` (+1 -1) 📝 `charts/open-webui/README.md` (+4 -3) 📝 `charts/open-webui/templates/websocket-redis.yaml` (+15 -1) 📝 `charts/open-webui/values.yaml` (+8 -2) </details> ### 📄 Description securityContext could only be set on pod level, not container level. So a read only root filesystem could not be set. In addition, if readOnlyRootFilesystem is set, mount an emptyDir at /data for redis to have write access. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-15 19:17:19 -05:00
yindo closed this issue 2026-02-15 19:17:19 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: open-webui/helm-charts#310