3 people a6e862ee0c fix(runtimes): set defaultMode on MPI SSH Secret volume (#3649) ...

* fix(runtimes): set file modes on MPI SSH secret volume

Set per-item file modes on the MPI SSH auth Secret volume to prevent
the private key from being world-readable inside training pods.

Private key uses 0o640 (not 0o600) because the builtin
deepspeed-distributed and mlx-distributed runtimes run as
runAsUser: 1000 while Secret volumes mount as root:root.

A volume-level DefaultMode of 0o400 is added as defense-in-depth
for any future items added without an explicit per-item mode.

Fixes #3262

Signed-off-by: Dmytro Hryshchenko <[email protected]>

* docs: update pkg/constants/constants.go

Co-authored-by: Andrey Velichkevich <[email protected]>
Signed-off-by: Dmytro Hryshchenko <[email protected]>

---------

Signed-off-by: Dmytro Hryshchenko <[email protected]>
Signed-off-by: Dmytro Hryshchenko <[email protected]>
Co-authored-by: Andrey Velichkevich <[email protected]>

Co-authored-by: Hanzo Dev <[email protected]>

2026-06-24 10:40:35 +00:00

..

clustertrainingruntime_test.go

feat: add support for tracking TrainJob progress and training metrics (#3227)

2026-03-13 20:01:08 +00:00

clustertrainingruntime.go

feat: add support for tracking TrainJob progress and training metrics (#3227)

2026-03-13 20:01:08 +00:00

core_test.go

chore(runtimes): persist runtimes map and expose Runtimes function (#3360)

2026-03-19 10:37:26 +00:00

core.go

chore(runtimes): persist runtimes map and expose Runtimes function (#3360)

2026-03-19 10:37:26 +00:00

registry_test.go

chore(scripts): add copyright boilerplate verification (#3359)

2026-05-29 10:50:56 +00:00

registry.go

feat: add support for tracking TrainJob progress and training metrics (#3227)

2026-03-13 20:01:08 +00:00

trainingruntime_test.go

fix(runtimes): set defaultMode on MPI SSH Secret volume (#3649)

2026-06-24 10:40:35 +00:00

trainingruntime.go

feat: add support for tracking TrainJob progress and training metrics (#3227)

2026-03-13 20:01:08 +00:00