2d3e01ec80
docs: relase 0.2.6
2025-12-29 17:36:26 +08:00
d6f94cd7ec
feat(helm): 添加Neo4j模板支持GraphRAG功能
...
- 新增neo4j.yaml部署和服务模板
- 在app.yaml中添加Neo4j环境变量
- 在pvc.yaml中添加Neo4j持久卷
- 在secrets.yaml中添加Neo4j认证信息
- 在_helpers.tpl中添加Neo4j镜像助手
- 在NOTES.txt中添加GraphRAG说明
- 在values.yaml中添加Neo4j配置
- 简化.helmignore以修复Helm否定模式错误 (helm/helm#8688)
Fixes #483
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2025-12-26 11:36:47 +08:00
4159c9d3a5
fix: Use versioned image tag and remove capabilities drop
...
- Chart.yaml: appVersion "0.2.5" -> "v0.2.5" (match Docker Hub tag format)
- values.yaml: app.image.tag "" (use appVersion) instead of "latest"
- values.yaml: Remove capabilities drop (nginx requires CAP_CHOWN)
Verified all pods running successfully on local k3s cluster.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2025-12-24 15:29:29 +08:00
f82a0f360c
fix: Disable runAsNonRoot for official images compatibility
...
Official Docker images (nginx, postgres, redis, paradedb) run as root
by default. Disabled runAsNonRoot and readOnlyRootFilesystem to ensure
compatibility.
Changes:
- global.podSecurityContext: removed runAsNonRoot
- global.containerSecurityContext: removed runAsNonRoot, readOnlyRootFilesystem
- Component securityContext: commented out incompatible settings
- app.image.tag: changed from "" to "latest" (versioned tags not available)
Tested on local Kubernetes cluster (k3s) with all pods running successfully.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2025-12-24 15:29:29 +08:00
451f543e6d
feat: Add Helm chart for Kubernetes deployment
...
Add comprehensive Helm chart for deploying WeKnora to Kubernetes clusters.
Features:
- Core services: app, frontend, docreader, postgresql, redis
- Optional services: MinIO, Neo4j, Qdrant, Jaeger (matching docker-compose profiles)
- CNCF security best practices (SecurityContext, ServiceAccount, non-root)
- Comprehensive documentation (README.md, NOTES.txt)
- Required secrets validation (no default passwords)
References:
- https://helm.sh/docs/chart_best_practices/
- https://github.com/argoproj/argo-helm
- https://github.com/prometheus-community/helm-charts
- https://github.com/cert-manager/cert-manager
Fixes #478
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com >
2025-12-24 15:29:29 +08:00
wizardchen