diff --git a/ai-service/Chart.yaml b/ai-service/Chart.yaml
new file mode 100644
index 0000000..3d5746d
--- /dev/null
+++ b/ai-service/Chart.yaml
@@ -0,0 +1,6 @@
+apiVersion: v2
+name: ai-service
+description: A Helm chart for Privado AI Service on Kubernetes
+type: application
+version: 0.1.0
+appVersion: "1.16.0"
diff --git a/ai-service/README.md b/ai-service/README.md
new file mode 100644
index 0000000..589c5bb
--- /dev/null
+++ b/ai-service/README.md
@@ -0,0 +1,87 @@
+# Charts
+
+The Helm charts for deploying the AI Service. There are two charts for deploying the Ai Service and ChromaDB containers.
+The ChromaDB chart is a dependency for the Ai Service chart.
+
+## Prerequisites
+
+1. In the kubernetes cluster, the following resources should be available:
+    - `g5.xlarge` instance type for the Ai Service container. Or change the instance type in the values.yaml file.
+    - The Ai Service container/pod should be able to connect the Andromeda service.
+    - The Nvidia GPU driver should be installed in the node.
+    - The nvidia-device-plugin should be installed in the cluster.
+        - `kubectl get nodes "-o=custom-columns=NAME:.metadata.name,GPU:.status.allocatable.nvidia\.com/gpu"` to confirm
+          the GPU availability.
+2. In the [values.yaml](./values.yaml) file, verify the following attributes:
+    - Update the following environment variables for the Ai Service container as needed
+        - AI_SERVICE_ANDROMEDA_HOST: "http://andromeda-service.privado.svc.cluster.local:6001"
+        - CHROMA_HOST: "ai-service-chroma-chromadb.privado.svc.cluster.local"
+            - Without any port, the default port (8000) is used.
+            - Without the 'http://' prefix.
+    - NodeSelector configuration
+        - `node.kubernetes.io/instance-type: g5.xlarge` update the instance type as needed.
+            - A GPU core with 24GB+ vRAM is a requirement to deploy the Ai Service container.
+    - Persistent Volume configuration
+        - Update the storage class name as needed.
+        - Update the storage size as needed.
+    - Update the AWS credentials to provide the access key and secret key.
+3. **Updating values.yaml with init.sh.** Instead of manually editing the values.yaml file, the init.sh script can be
+   used to set the necessary values.
+    - To run the script: `bash init.sh`
+    - The script will prompt you for various values. If you do not provide a new value, the default value will be used. 
+      The script will update the values.yaml file with the provided values, ensuring that all necessary configurations 
+      are set correctly. It is also keep a backup of the original values.yaml file. If you want to revert to the 
+      original values.yaml file (or run this script again), you can use the backup file.
+4. **Adding custom annotations and labels.** If you want to add custom annotations and labels to the Ai Service pod, you
+   can do so by updating the values.yaml file. The annotations and labels are added to the pod spec in the deployment
+   template. You can add the annotations and labels under the `annotations` and `labels` sections in the values.yaml file.
+   The annotations and labels should be in key-value format. For example:
+    ```yaml
+    annotations:
+      key1: value1
+      key2: value2
+    labels:
+      key1: value1
+      key2: value2
+    ```
+5. Install ChromaDb helm chart before installing the Ai Service chart using the following commands:
+
+```bash
+   helm repo add chroma https://amikos-tech.github.io/chromadb-chart/
+   helm repo update
+   helm search repo chroma/
+   kubectl create namespace privado
+   helm install ai-service-chroma chroma/chromadb -n privado --set chromadb.allowReset="true" --set chromadb.auth.enabled="false" --set chromadb.serverHost="chromadb"
+```
+
+# Deploying the AI Service
+
+Following steps will deploy ai-service chart:
+
+1. `kubectl config current-context` to verify the kubectl context.
+2. `helm package .` to package the Ai Service chart.
+3. `helm install ai-service ai-service-0.1.0.tgz -n privado` to install the Ai Service chart.
+
+# Post Installation Steps
+
+Following steps will verify the installation of ai-service chart:
+
+1. `kubectl get pods` to verify the Ai Service pods are running.
+2. `kubclt logs -f <pod-name>` to view the container logs of the Ai Service pod.
+3. `kubclt exec -it <pod-name> -- /bin/bash` to access the Ai Service container shell.
+    - `tais` to view the ai-service logs. Following like should be visible:
+        - `GET / => generated X bytes in Y msecs (HTTP/1.1 200) 8 headers in Z bytes`
+
+Following steps will verify successful integration with Privado backend:
+
+1. Login to the Privado dashboard.
+2. Navigate to the "Contract Scanning" menu
+3. Upload a DPA (Data Protection Agreement) pdf. Any public DPA is fine.
+4. Verify that the DPA is scanned and the results are displayed in the dashboard.
+
+# Uninstalling the AI Service
+
+Following steps will uninstall ai-service chart:
+
+1. `helm uninstall ai-service` to uninstall the Ai Service chart.
+2. `helm uninstall ai-service-chroma` to uninstall the ChromaDB chart.
\ No newline at end of file
diff --git a/ai-service/init.sh b/ai-service/init.sh
new file mode 100644
index 0000000..15ebb56
--- /dev/null
+++ b/ai-service/init.sh
@@ -0,0 +1,34 @@
+#!/bin/bash
+
+# Function to prompt the user for input with a default value
+prompt() {
+  local var_name=$1
+  local prompt_text=$2
+  local default_value=$3
+  read -p "$prompt_text ($default_value): " input
+  echo "${input:-$default_value}"
+}
+
+# File to update
+values_file="values.yaml"
+
+# Prompt the user for each value
+ai_service_andromeda_host=$(prompt "AI_SERVICE_ANDROMEDA_HOST" "Enter the AI Service Andromeda Host URL" "http://andromeda-service.privado.svc.cluster.local:6001")
+chroma_host=$(prompt "CHROMA_HOST" "Enter the Chroma Host (without 'http://' prefix)" "ai-service-chroma-chromadb.privado.svc.cluster.local")
+secret_access_key_id=$(prompt "secretAccessKeyId" "Enter the AWS Secret Access Key ID" "None")
+secret_access_key=$(prompt "secretAccessKey" "Enter the AWS Secret Access Key" "None")
+node_instance_type=$(prompt "node.kubernetes.io/instance-type" "Enter the node instance type" "g5.xlarge")
+models_storage_class=$(prompt "aiServiceModelsPvc.storageClassName" "Enter the storage class name for models PVC" "gp2")
+log_storage_class=$(prompt "aiServiceLogPvc.storageClassName" "Enter the storage class name for log PVC" "gp2")
+
+# Update the values.yaml file
+sed -i.bak -e "s/secretAccessKeyId: .*/secretAccessKeyId: \"$secret_access_key_id\"/" \
+           -e "s/secretAccessKey: .*/secretAccessKey: \"$secret_access_key\"/" \
+           -e "s/node.kubernetes.io\/instance-type: .*/node.kubernetes.io\/instance-type: $node_instance_type/" \
+           -e "s/storageClassName: gp2 # NEEDS-CUSTOMER-INPUT.*/storageClassName: $models_storage_class # NEEDS-CUSTOMER-INPUT/" \
+           -e "s/storageClassName: gp2 # NEEDS-CUSTOMER-INPUT.*/storageClassName: $log_storage_class # NEEDS-CUSTOMER-INPUT/" \
+           -e "s|value: \"http://andromeda-service.privado.svc.cluster.local:6001\" # NEEDS-CUSTOMER-INPUT|value: \"$ai_service_andromeda_host\" # NEEDS-CUSTOMER-INPUT|" \
+           -e "s|value: \"ai-service-chroma-chromadb.privado.svc.cluster.local\"  # NEEDS-CUSTOMER-INPUT \[without 'http://'\ prefix\]|value: \"$chroma_host\"  # NEEDS-CUSTOMER-INPUT \[without 'http://'\ prefix\]|" \
+           "$values_file"
+
+echo "values.yaml has been updated."
\ No newline at end of file
diff --git a/ai-service/templates/_helpers.tpl b/ai-service/templates/_helpers.tpl
new file mode 100644
index 0000000..8b79d82
--- /dev/null
+++ b/ai-service/templates/_helpers.tpl
@@ -0,0 +1,62 @@
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "ai-service.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "ai-service.fullname" -}}
+{{- if .Values.fullnameOverride }}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- $name := default .Chart.Name .Values.nameOverride }}
+{{- if contains $name .Release.Name }}
+{{- .Release.Name | trunc 63 | trimSuffix "-" }}
+{{- else }}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }}
+{{- end }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "ai-service.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }}
+{{- end }}
+
+{{/*
+Common labels
+*/}}
+{{- define "ai-service.labels" -}}
+helm.sh/chart: {{ include "ai-service.chart" . }}
+{{ include "ai-service.selectorLabels" . }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end }}
+
+{{/*
+Selector labels
+*/}}
+{{- define "ai-service.selectorLabels" -}}
+app.kubernetes.io/name: {{ include "ai-service.name" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
+
+{{/*
+Create the name of the service account to use
+*/}}
+{{- define "ai-service.serviceAccountName" -}}
+{{- if .Values.serviceAccount.create }}
+{{- default (include "ai-service.fullname" .) .Values.serviceAccount.name }}
+{{- else }}
+{{- default "default" .Values.serviceAccount.name }}
+{{- end }}
+{{- end }}
diff --git a/ai-service/templates/cron.update.yaml b/ai-service/templates/cron.update.yaml
new file mode 100644
index 0000000..5397037
--- /dev/null
+++ b/ai-service/templates/cron.update.yaml
@@ -0,0 +1,113 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ .Values.autoupdates.roleName }}
+rules:
+  - apiGroups: [""]
+    resources:
+      - pods
+      - deployments
+    verbs:
+      - 'get'
+      - 'list'
+  - apiGroups: ["extensions", "apps"]
+    resources:
+      - deployments
+    verbs:
+      - 'get'
+      - 'patch'
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .Values.autoupdates.roleBindingName }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Values.autoupdates.serviceAccountName }}
+roleRef:
+  kind: Role
+  name: {{ .Values.autoupdates.roleName }}
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Values.autoupdates.serviceAccountName }}
+---
+{{- if .Capabilities.APIVersions.Has "batch/v1/CronJob" }}
+apiVersion: batch/v1
+{{- else }}
+apiVersion: batch/v1beta1
+{{- end }}
+kind: CronJob
+metadata:
+  name: {{ .Values.autoupdates.cronName }}
+  labels:
+    {{- range $key, $val := .Values.autoupdates.cronjobLabels }}
+    {{ $key }}: {{ $val | quote }}
+    {{- end }}
+  annotations:
+    {{- range $key, $val := .Values.autoupdates.cronjobAnnotations }}
+    {{ $key }}: {{ $val | quote }}
+    {{- end }}
+spec:
+  schedule: {{ .Values.autoupdates.cronSchedule | quote }}
+  successfulJobsHistoryLimit: 1
+  failedJobsHistoryLimit: 1
+  jobTemplate:
+    spec:
+      template:
+        spec:
+          serviceAccountName: {{ .Values.autoupdates.serviceAccountName }}
+          restartPolicy: {{ .Values.autoupdates.cronPodRestartPolicy }}
+          containers:
+            - name: updater
+              image: {{ .Values.autoupdates.image.name }}:{{ .Values.autoupdates.image.tag }}
+              imagePullPolicy: {{ .Values.image.pullPolicy }}
+              command:
+                - /bin/bash
+                - -c
+                - |-
+                  set -e
+                  NAMESPACE={{ .Release.Namespace }}
+                  echo "Checking for image updates on AWS ECR for {{ .Values.autoupdates.deploymentName }}"
+                  # Function to get AWS ECR image SHA
+                  function get_ecr_sha() {
+                    REPO_NAME=$1
+                    TAG=$2
+                    IMAGE_SHA=`aws ecr describe-images --repository-name ${REPO_NAME} --region ${AWS_REGION} --image-ids imageTag=${TAG} | jq -r ".imageDetails[0].imageDigest"`
+
+                    echo $IMAGE_SHA
+                  }
+
+                  # Function to check and patch deployment if there's an image SHA mismatch
+                  function check_and_patch_deployment() {
+                    DEPLOYMENT_NAME=$1
+                    POD_APP_LABEL=$2
+                    IMAGE_NAME=$3
+                    IMAGE_TAG=$4
+
+                    POD=`kubectl -n $NAMESPACE get pods -l "app.kubernetes.io/name=$POD_APP_LABEL" -o name | head -1`
+                    CURRENT_IMAGE_SHA=`kubectl -n $NAMESPACE get $POD -o jsonpath="{..imageID}" | cut -f 2 -d "@"`
+                    LATEST_IMAGE_SHA=$(get_ecr_sha $IMAGE_NAME $IMAGE_TAG)
+
+                    echo "> Current $DEPLOYMENT_NAME SHA: $CURRENT_IMAGE_SHA"
+                    echo "> Latest $DEPLOYMENT_NAME SHA: $LATEST_IMAGE_SHA"
+                    if [[ $CURRENT_IMAGE_SHA != $LATEST_IMAGE_SHA ]]; then
+                      echo "> Update for $POD found"
+                      echo "> Applying patch to $DEPLOYMENT_NAME"
+                      kubectl -n $NAMESPACE patch deployment $DEPLOYMENT_NAME -p "{\"spec\": {\"template\":{\"metadata\":{\"annotations\":{\"{{ .Values.autoupdates.annotationName }}\":\"'$LATEST_IMAGE_SHA'\"}}}} }"
+                    fi
+                  }
+
+                  check_and_patch_deployment "{{ .Values.autoupdates.deploymentName }}" "{{ .Values.autoupdates.podAppLabel }}" "{{ splitList "/" (tpl .Values.image.repository .) | last }}" "{{ .Values.image.tag }}"
+              envFrom:
+              - secretRef:
+                  name: {{ .Values.image.imagePullSecret }}
+              env:
+                - name: SECRET_NAME
+                  value: {{ .Values.image.imagePullSecret }}
+                - name: AWS_REGION
+                  value: {{ .Values.autoupdates.awsRegion }}
+                - name: NAMESPACE
+                  value: {{ .Release.Namespace }}
diff --git a/ai-service/templates/deployment.yaml b/ai-service/templates/deployment.yaml
new file mode 100644
index 0000000..5cad7f1
--- /dev/null
+++ b/ai-service/templates/deployment.yaml
@@ -0,0 +1,68 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "ai-service.fullname" . }}
+  labels:
+    {{- include "ai-service.labels" . | nindent 4 }}
+spec:
+  {{- if not .Values.autoscaling.enabled }}
+  replicas: {{ .Values.replicaCount }}
+  {{- end }}
+  selector:
+    matchLabels:
+      {{- include "ai-service.selectorLabels" . | nindent 6 }}
+  template:
+    metadata:
+      {{- with .Values.podAnnotations }}
+      annotations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      labels:
+        {{- include "ai-service.labels" . | nindent 8 }}
+        {{- with .Values.podLabels }}
+        {{- toYaml . | nindent 8 }}
+        {{- end }}
+    spec:
+      imagePullSecrets:
+        - name: {{ .Values.image.imagePullSecret }}
+      serviceAccountName: {{ include "ai-service.serviceAccountName" . }}
+      securityContext:
+        {{- toYaml .Values.podSecurityContext | nindent 8 }}
+      containers:
+        - name: {{ .Chart.Name }}
+          securityContext:
+            {{- toYaml .Values.securityContext | nindent 12 }}
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          ports:
+            - name: http
+              containerPort: {{ .Values.service.port }}
+              protocol: TCP
+          env:
+            {{- toYaml .Values.service.env | nindent 12 }}
+          livenessProbe:
+            {{- toYaml .Values.livenessProbe | nindent 12 }}
+          readinessProbe:
+            {{- toYaml .Values.readinessProbe | nindent 12 }}
+          resources:
+            {{- toYaml .Values.resources | nindent 12 }}
+          {{- with .Values.volumeMounts }}
+          volumeMounts:
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+      {{- with .Values.volumes }}
+      volumes:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.nodeSelector }}
+      nodeSelector:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.affinity }}
+      affinity:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
+      {{- with .Values.tolerations }}
+      tolerations:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
diff --git a/ai-service/templates/hpa.yaml b/ai-service/templates/hpa.yaml
new file mode 100644
index 0000000..d622ca7
--- /dev/null
+++ b/ai-service/templates/hpa.yaml
@@ -0,0 +1,32 @@
+{{- if .Values.autoscaling.enabled }}
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: {{ include "ai-service.fullname" . }}
+  labels:
+    {{- include "ai-service.labels" . | nindent 4 }}
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: {{ include "ai-service.fullname" . }}
+  minReplicas: {{ .Values.autoscaling.minReplicas }}
+  maxReplicas: {{ .Values.autoscaling.maxReplicas }}
+  metrics:
+    {{- if .Values.autoscaling.targetCPUUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: cpu
+        target:
+          type: Utilization
+          averageUtilization: {{ .Values.autoscaling.targetCPUUtilizationPercentage }}
+    {{- end }}
+    {{- if .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    - type: Resource
+      resource:
+        name: memory
+        target:
+          type: Utilization
+          averageUtilization: {{ .Values.autoscaling.targetMemoryUtilizationPercentage }}
+    {{- end }}
+{{- end }}
diff --git a/ai-service/templates/ingress.yaml b/ai-service/templates/ingress.yaml
new file mode 100644
index 0000000..1575f51
--- /dev/null
+++ b/ai-service/templates/ingress.yaml
@@ -0,0 +1,43 @@
+{{- if .Values.ingress.enabled -}}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "ai-service.fullname" . }}
+  labels:
+    {{- include "ai-service.labels" . | nindent 4 }}
+  {{- with .Values.ingress.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+spec:
+  {{- with .Values.ingress.className }}
+  ingressClassName: {{ . }}
+  {{- end }}
+  {{- if .Values.ingress.tls }}
+  tls:
+    {{- range .Values.ingress.tls }}
+    - hosts:
+        {{- range .hosts }}
+        - {{ . | quote }}
+        {{- end }}
+      secretName: {{ .secretName }}
+    {{- end }}
+  {{- end }}
+  rules:
+    {{- range .Values.ingress.hosts }}
+    - host: {{ .host | quote }}
+      http:
+        paths:
+          {{- range .paths }}
+          - path: {{ .path }}
+            {{- with .pathType }}
+            pathType: {{ . }}
+            {{- end }}
+            backend:
+              service:
+                name: {{ include "ai-service.fullname" $ }}
+                port:
+                  number: {{ $.Values.service.port }}
+          {{- end }}
+    {{- end }}
+{{- end }}
diff --git a/ai-service/templates/pvc.yaml b/ai-service/templates/pvc.yaml
new file mode 100644
index 0000000..5ade579
--- /dev/null
+++ b/ai-service/templates/pvc.yaml
@@ -0,0 +1,24 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ .Values.persistentVolumeClaim.aiServiceModelsPvc.name }}
+spec:
+  accessModes:
+    - "{{ .Values.persistentVolumeClaim.aiServiceModelsPvc.accessModes }}"
+  resources:
+    requests:
+      storage: {{ .Values.persistentVolumeClaim.aiServiceModelsPvc.resources.requests.storage }}
+  storageClassName: {{ .Values.persistentVolumeClaim.aiServiceModelsPvc.storageClassName }}
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ .Values.persistentVolumeClaim.aiServiceLogPvc.name }}
+spec:
+  accessModes:
+    - "{{ .Values.persistentVolumeClaim.aiServiceLogPvc.accessModes }}"
+  resources:
+    requests:
+      storage: {{ .Values.persistentVolumeClaim.aiServiceLogPvc.resources.requests.storage }}
+  storageClassName: {{ .Values.persistentVolumeClaim.aiServiceLogPvc.storageClassName }}
diff --git a/ai-service/templates/secret.yaml b/ai-service/templates/secret.yaml
new file mode 100644
index 0000000..7b91247
--- /dev/null
+++ b/ai-service/templates/secret.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Values.privadoAwsSecrets.secretName }}
+  annotations:
+    "helm.sh/hook": "pre-install,pre-upgrade"
+    {{- with .Values.privadoAwsSecrets.annotations }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+type: Opaque
+data:
+  AWS_ACCESS_KEY_ID: {{ .Values.privadoAwsSecrets.secretAccessKeyId | b64enc | quote }}
+  AWS_SECRET_ACCESS_KEY: {{ .Values.privadoAwsSecrets.secretAccessKey | b64enc | quote }}
diff --git a/ai-service/templates/service.yaml b/ai-service/templates/service.yaml
new file mode 100644
index 0000000..a42f9d0
--- /dev/null
+++ b/ai-service/templates/service.yaml
@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ include "ai-service.fullname" . }}
+  labels:
+    {{- include "ai-service.labels" . | nindent 4 }}
+  annotations:
+    {{- with .Values.service.annotations }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
+spec:
+  type: {{ .Values.service.type }}
+  ports:
+    - port: {{ .Values.service.port }}
+      targetPort: http
+      protocol: TCP
+      name: http
+  selector:
+    {{- include "ai-service.selectorLabels" . | nindent 4 }}
diff --git a/ai-service/templates/serviceaccount.yaml b/ai-service/templates/serviceaccount.yaml
new file mode 100644
index 0000000..f487aca
--- /dev/null
+++ b/ai-service/templates/serviceaccount.yaml
@@ -0,0 +1,13 @@
+{{- if .Values.serviceAccount.create -}}
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ include "ai-service.serviceAccountName" . }}
+  labels:
+    {{- include "ai-service.labels" . | nindent 4 }}
+  {{- with .Values.serviceAccount.annotations }}
+  annotations:
+    {{- toYaml . | nindent 4 }}
+  {{- end }}
+automountServiceAccountToken: {{ .Values.serviceAccount.automount }}
+{{- end }}
diff --git a/ai-service/values.yaml b/ai-service/values.yaml
new file mode 100644
index 0000000..bdc0e62
--- /dev/null
+++ b/ai-service/values.yaml
@@ -0,0 +1,133 @@
+replicaCount: 1
+
+service:
+  type: ClusterIP
+  port: 8080
+  targetPort: 8080
+  env:
+    - name: DEPLOYMENT_GROUP_NAME
+      value: "enterprise-env"
+    - name: AI_SERVICE_ANDROMEDA_HOST
+      value: "http://andromeda-service.privado.svc.cluster.local:6001" # NEEDS-CUSTOMER-INPUT
+    - name: CHROMA_HOST
+      value: "ai-service-chroma-chromadb.privado.svc.cluster.local"  # NEEDS-CUSTOMER-INPUT [without 'http://' prefix]
+    - name: NVIDIA_DRIVER_CAPABILITIES
+      value: "all"
+  labels: { } # Add custom labels here
+  annotations: { } # Add custom annotations here
+
+image:
+  repository: 638117407428.dkr.ecr.eu-west-1.amazonaws.com/ai-service-on-premise
+  tag: latest
+  pullPolicy: Always
+  imagePullSecret: ai-service-ecr-secret
+
+privadoAwsSecrets:
+  secretName: ai-service-ecr-secret
+  secretAccessKeyId: "_CUSTOMER_AWS_ACCESS_KEY_ID_"  # NEEDS-CUSTOMER-INPUT
+  secretAccessKey: "_CUSTOMER_AWS_SECRET_ACCESS_KEY_"  # NEEDS-CUSTOMER-INPUT
+  annotations: { }  # Add custom labels here
+
+serviceAccount:
+  name: ai-service-account
+  create: true
+  automount: true
+  annotations: { }  # Add custom labels here
+  labels: { }  # Add custom annotations here
+
+resources:
+  limits:
+    nvidia.com/gpu: 1
+  requests:
+    cpu: "2000m"
+    memory: "4Gi"
+    nvidia.com/gpu: 1
+
+nodeSelector:
+  node.kubernetes.io/instance-type: g5.xlarge  # NEEDS-CUSTOMER-INPUT
+
+# values related to auto-updating the deployment when the ai-service image is updated
+autoupdates:
+  podAppLabel: ai-service
+  deploymentName: ai-service
+  annotationName: "checksum/image-sha256"
+  serviceAccountName: ai-service-updater-account
+  awsRegion: "eu-west-1"
+  roleName: ai-service-updater-role
+  roleBindingName: ai-service-updater-rb
+  cronName: ai-service-updater
+  cronSchedule: "*/10 * * * *"
+  cronPodRestartPolicy: OnFailure
+  cronjobLabels:  # key: value
+  cronjobAnnotations: # key: value
+  image:
+    name: public.ecr.aws/privado/awscli-kubectl
+    tag: latest
+    imagePullPolicy: Always
+    imagePullSecret: ai-service-ecr-secret
+
+livenessProbe:
+  httpGet:
+    path: /ht/
+    port: http
+  initialDelaySeconds: 300
+  periodSeconds: 30
+  timeoutSeconds: 5
+  failureThreshold: 3
+  successThreshold: 1
+readinessProbe:
+  httpGet:
+    path: /ht/
+    port: http
+  initialDelaySeconds: 60
+
+ingress:
+  enabled: false
+  name: ai-service-ingress
+
+autoscaling:
+  enabled: false
+  minReplicas: 1
+  maxReplicas: 5
+  targetCPUUtilizationPercentage: 80
+
+volumes:
+  - name: ai-service-models-volume
+    persistentVolumeClaim:
+      claimName: ai-service-models-pvc
+  - name: ai-service-log-volume
+    persistentVolumeClaim:
+      claimName: ai-service-log-pvc
+
+volumeMounts:
+  - name: ai-service-log-volume
+    mountPath: "/var/log/uwsgi"
+    readOnly: false
+  - name: ai-service-models-volume
+    mountPath: "/var/models"
+    readOnly: false
+
+persistentVolumeClaim:
+  aiServiceModelsPvc:
+    name: ai-service-models-pvc
+    accessModes: "ReadWriteOnce" # Update ReadWriteMany if autoscaling is enabled
+    resources:
+      requests:
+        storage: 80Gi
+    storageClassName: gp2 # NEEDS-CUSTOMER-INPUT. Adjust the storageClassName as needed.
+  aiServiceLogPvc:
+    name: ai-service-log-pvc
+    accessModes: "ReadWriteOnce"
+    resources:
+      requests:
+        storage: 10Gi
+    storageClassName: gp2 # NEEDS-CUSTOMER-INPUT
+
+podAnnotations: { } # Add custom labels here
+podLabels: { } # Add custom labels here
+
+nameOverride: ""
+fullnameOverride: ""
+podSecurityContext: { }
+imagePullSecrets: [ ]
+securityContext: { }