docker-sonarqube
docker-sonarqube copied to clipboard
root Group not compliant with Baseline PodSecurityStandard
With these commits... ...for the Dockerfile: https://github.com/SonarSource/docker-sonarqube/commit/8e556d6ac42832b1e1049a442b6cf8e3583d6330 ...for the Helm Chart: https://github.com/SonarSource/helm-chart-sonarqube/commit/9b273fcccc8e4552110b4eda3288c2bfaaf13ac8
Sonarqube is no longer compliant with the Baseline PodSecurityStandard.
After a pending upgrade to sonarqube-10.5.0_2748
I face following issue:
create Pod sonarqube-sonarqube-0 in StatefulSet sonarqube-sonarqube failed error: pods "sonarqube-sonarqube-0" is forbidden: violates PodSecurity "baseline:latest": privileged (containers "init-sysctl", "concat-properties", "install-plugins" must not set securityContext.privileged=true)
To solve it I removed the enforced Baseline PSS for this deployments namespace, which is not really the happy path I would take as it worked before.