Skip to content

Conversation

@nvanthao
Copy link
Member

@nvanthao nvanthao commented Dec 4, 2024

A Helm chart using fake-service
Replicated manifests to deploy the chart with Replicated

@nvanthao nvanthao requested a review from DexterYan December 12, 2024 03:40
@nvanthao nvanthao merged commit f5e18e3 into main Dec 19, 2024
chris-sanders added a commit that referenced this pull request Sep 30, 2025
BREAKING CHANGE: Basic authentication is now disabled due to
compatibility issues between MLflow 3.x basic-auth and various
deployment configurations.

Security fixes:
- Upgraded MLflow from 2.11.0 to 3.3.2 (resolves 13/14 HIGH alerts)
- Upgraded scikit-learn to >=1.5.0 (resolves 1 MEDIUM alert)
- All medium and low severity alerts addressed

Infrastructure updates:
- Migrated container images to bitnamilegacy registry
- Updated kubectl image to bitnamilegacy/kubectl:1.33.4-debian-12-r0
- Updated postgres image to bitnamilegacy/postgresql:17.6.0-debian-12-r4
- Made postgres backup image configurable

MLflow 3.x compatibility:
- Removed --dev flag (incompatible with MLflow 3.x)
- Fixed template indentation for extraInitContainers and extraVolumes
- Fixed basic_auth.ini template to remove quotes from credentials
- Added SQLite auth database path (though auth is disabled)

Test updates:
- Removed authentication from tests
- Updated test to work with MLflow 3.x without basic auth

Known limitations:
- Basic auth disabled (MLflow 3.x experimental feature has issues)
- Dependabot alert #22 has no patch available

Chart version bumped to 0.5.0 reflecting the breaking change.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants