Merge branch 'main' into feat/community_tools

.github/workflows/trufflehog.yml

@@ -0,0 +1,21 @@
+on:
+  push:
+
+name: Secret Leaks
+
+permissions:
+  contents: read
+  id-token: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  trufflehog:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Secret Scanning
+        uses: trufflesecurity/trufflehog@main

chart/env/prod.yaml

@@ -8,7 +8,12 @@ nodeSelector:
 tolerations:
   - key: CriticalAddonsOnly
     operator: Equal
-
+
+serviceAccount:
+  enabled: true
+  create: true
+  name: huggingchat-prod
+
 ingress:
   path: "/chat"
   annotations:
@@ -181,7 +186,6 @@ envVars:
           "modelUrl": "https://huggingface.co/01-ai/Yi-1.5-34B-Chat",
           "websiteUrl": "https://www.01.ai",
           "preprompt": "",
-          "chatPromptTemplate": "{{preprompt}}{{#each messages}}{{#ifUser}}<|im_start|>user\\n{{content}}<|im_end|>\\n<|im_start|>assistant\\n{{/ifUser}}{{#ifAssistant}}{{content}}<|im_end|>{{/ifAssistant}}{{/each}}",
           "parameters": {
             "stop": ["<|im_end|>"],
             "temperature": 0.3,

chart/templates/deployment.yaml

@@ -25,6 +25,9 @@ spec:
         co.elastic.logs/json.expand_keys: "true"
       {{- end }}
     spec:
+      {{- if .Values.serviceAccount.enabled }}
+      serviceAccountName: "{{ .Values.serviceAccount.name | default (include "name" .) }}"
+      {{- end }}
       containers:
         - name: chat-ui
           image: "{{ .Values.image.repository }}/{{ .Values.image.name }}:{{ .Values.image.tag }}"

chart/templates/service-account.yaml

@@ -0,0 +1,13 @@
+{{- if and .Values.serviceAccount.enabled .Values.serviceAccount.create }}
+apiVersion: v1
+kind: ServiceAccount
+automountServiceAccountToken: {{ .Values.serviceAccount.automountServiceAccountToken }}
+metadata:
+  name: "{{ .Values.serviceAccount.name | default (include "name" .) }}"
+  namespace: {{ .Release.Namespace }}
+  labels: {{ include "labels.standard" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+{{- end }}

chart/values.yaml

@@ -12,6 +12,13 @@ service:
   type: NodePort
   annotations: { }
 
+serviceAccount:
+  enabled: false
+  create: false
+  name: ""
+  automountServiceAccountToken: true
+  annotations: { }
+
 ingress:
   enabled: true
   path: "/"