Stock helm install: exposed AI services with no authentication

Stock helm install: exposed AI services with no authentication An architecture diagram generated by Archify. Internet · browser · curl · agent · Architecture component Internet browser · curl · agent Service: LoadBalancer · default value :8888 · Kubernetes cluster — chart default values Service: LoadBalancer default value :8888 Service: LoadBalancer · default value :80 · Kubernetes cluster — chart default values Service: LoadBalancer default value :80 Service: LoadBalancer · default value :19530 · Kubernetes cluster — chart default values Service: LoadBalancer default value :19530 JupyterHub · authenticator_class: dummy · Kubernetes cluster — chart default values · official chart · accepts any username JupyterHub authenticator_class: dummy official chart · accepts any username Weaviate · anonymous_access: true · Kubernetes cluster — chart default values · official chart · no API key required Weaviate anonymous_access: true official chart · no API key required Milvus · auth.enabled: false · Kubernetes cluster — chart default values · official Bitnami chart · authorization disabled Milvus auth.enabled: false official Bitnami chart · authorization disabled public traffic Kubernetes cluster — chart default values Legend Backend Security External

Dataset

  • • 452 charts collected from Artifact Hub
  • • 399 AI/LLM-relevant, default values only

Exposed, unauthenticated

  • • 42 charts expose a service by default (10.5%)
  • • 18 ship no auth config — all three charts here are official

One flag away

  • • 65 charts pair an exposure knob with zero auth keys
  • • helm show values, verified by hand