chore: update release-1.10 to ubi9/go-toolset:9.8-1782736563 from ubi9/go-toolset:9.8-1782377916 [skip-build] [skip-e2e] - #3113
Merged
rm3l merged 4 commits intoJun 29, 2026
Conversation
…9/go-toolset:9.8-1782377916 [skip-build] [skip-e2e] Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com>
…inimal:9.8-1782366411 [skip-build] [skip-e2e] Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com>
…9/go-toolset:9.8-1782377916 [skip-build] [skip-e2e] Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com>
…inimal:9.8-1782366411 [skip-build] [skip-e2e] Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com>
rm3l
approved these changes
Jun 29, 2026
|
JslYoon
pushed a commit
to JslYoon/rhdh-operator
that referenced
this pull request
Jul 1, 2026
…9/go-toolset:9.8-1782377916 [skip-build] [skip-e2e] (redhat-developer#3113) Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com>
JslYoon
pushed a commit
to JslYoon/rhdh-operator
that referenced
this pull request
Jul 1, 2026
…9/go-toolset:9.8-1782377916 [skip-build] [skip-e2e] (redhat-developer#3113) Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com>
openshift-merge-bot Bot
pushed a commit
that referenced
this pull request
Jul 1, 2026
… in init container (#3042) * fix(lightspeed): pre-create /data/vector_db/notebooks in init container On EKS/AKS, the RAG init container copies /rag/. to /data/ but never creates the notebooks subdirectory. At runtime, llama-stack tries to write /rag-content/vector_db/notebooks/faiss_store.db (same volume, mounted at /rag-content in the sidecar) and fails with PermissionError because it cannot create the directory. OCP avoids this via fsGroup defaults; EKS/AKS do not. The fix pre-creates /data/vector_db/notebooks before the existing chmod so the directory exists and is writable when the sidecar starts. Fixes: RHDHBUGS-3371 Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * fix(lightspeed): use --no-preserve=mode,ownership and fsGroup for notebooks permissions Apply the same fix used in rhdh-chart: - Use cp --no-preserve=mode,ownership so copied RAG files get the container's default permissions rather than inheriting restrictive ones from the source image - Set podSecurityContext.fsGroup: 1001 so Kubernetes chowns volumes to GID 1001 on mount, matching how OCP handles this via SCCs on EKS/AKS where fsGroup is not set automatically Together with the existing mkdir -p /data/vector_db/notebooks this ensures the notebooks directory is writable on all Kubernetes flavours. Fixes: RHDHBUGS-3371 Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * fix(lightspeed): align init container permissions with rhdh-chart fix Mirror the final fix from rhdh-chart (backstage 5.12.5): - Remove podSecurityContext.fsGroup: 1001 added in previous commit; the chart does not set this on the deployment spec - Replace 'chmod -R 777 /data/vector_db' with 'chmod -R a+rwX /data/embeddings_model', matching the chart which only widens permissions on the embeddings_model directory and relies on --no-preserve=mode,ownership + mkdir -p for the rest The operator volume mounts /data in the init container and /rag-content in the sidecar from the same volume, so /data/embeddings_model maps to /rag-content/embeddings_model -- identical to the chart fix. Fixes: RHDHBUGS-3371 Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> * Update config/profile/rhdh/default-config/flavours/lightspeed/deployment.yaml Co-authored-by: Armel Soro <armel@rm3l.org> * chore: update release-1.10 to ubi9/go-toolset:9.8-1782736563 from ubi9/go-toolset:9.8-1782377916 [skip-build] [skip-e2e] (#3113) Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com> * chore: regenerate bundle manifests Signed-off-by: Lucas <lyoon@redhat.com> --------- Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com> Signed-off-by: Lucas <lyoon@redhat.com> Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: Armel Soro <armel@rm3l.org> Co-authored-by: rhdh-bot service account <rhdh-bot@redhat.com>
openshift-merge-bot Bot
pushed a commit
that referenced
this pull request
Jul 2, 2026
… in init container (#3042) (#3134) * fix(lightspeed): pre-create /data/vector_db/notebooks in init container On EKS/AKS, the RAG init container copies /rag/. to /data/ but never creates the notebooks subdirectory. At runtime, llama-stack tries to write /rag-content/vector_db/notebooks/faiss_store.db (same volume, mounted at /rag-content in the sidecar) and fails with PermissionError because it cannot create the directory. OCP avoids this via fsGroup defaults; EKS/AKS do not. The fix pre-creates /data/vector_db/notebooks before the existing chmod so the directory exists and is writable when the sidecar starts. Fixes: RHDHBUGS-3371 * fix(lightspeed): use --no-preserve=mode,ownership and fsGroup for notebooks permissions Apply the same fix used in rhdh-chart: - Use cp --no-preserve=mode,ownership so copied RAG files get the container's default permissions rather than inheriting restrictive ones from the source image - Set podSecurityContext.fsGroup: 1001 so Kubernetes chowns volumes to GID 1001 on mount, matching how OCP handles this via SCCs on EKS/AKS where fsGroup is not set automatically Together with the existing mkdir -p /data/vector_db/notebooks this ensures the notebooks directory is writable on all Kubernetes flavours. Fixes: RHDHBUGS-3371 * fix(lightspeed): align init container permissions with rhdh-chart fix Mirror the final fix from rhdh-chart (backstage 5.12.5): - Remove podSecurityContext.fsGroup: 1001 added in previous commit; the chart does not set this on the deployment spec - Replace 'chmod -R 777 /data/vector_db' with 'chmod -R a+rwX /data/embeddings_model', matching the chart which only widens permissions on the embeddings_model directory and relies on --no-preserve=mode,ownership + mkdir -p for the rest The operator volume mounts /data in the init container and /rag-content in the sidecar from the same volume, so /data/embeddings_model maps to /rag-content/embeddings_model -- identical to the chart fix. Fixes: RHDHBUGS-3371 * Update config/profile/rhdh/default-config/flavours/lightspeed/deployment.yaml * chore: update release-1.10 to ubi9/go-toolset:9.8-1782736563 from ubi9/go-toolset:9.8-1782377916 [skip-build] [skip-e2e] (#3113) * chore: regenerate bundle manifests --------- Signed-off-by: rhdh-bot service account <rhdh-bot@redhat.com> Signed-off-by: Lucas <lyoon@redhat.com> Co-authored-by: Lucas Yoon <94267691+JslYoon@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: rhdh-bot service account <rhdh-bot@redhat.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Signed-off-by: rhdh-bot service account rhdh-bot@redhat.com