Skip to content

Commit

Permalink
fix: set initFS.enabled to false (#144)
Browse files Browse the repository at this point in the history
## Description
initFS value being enabled is no longer needed and only in place
presumably for backwards compatibility. This breaks the cluster security
policy when persistence is also enabled as it tries to run an init
container as root. Per SQ chart documentation this shouldnt be needed at
all anymore so disabling to resolve the issue.

## Related Issue

Fixes #
<!-- or -->
Relates to #

## Type of change

- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Other (security config, docs update, etc)

## Checklist before merging

- [x] Test, docs, adr added or updated as needed
- [ ] [Contributor Guide
Steps](https://github.com/defenseunicorns/uds-package-sonarqube/blob/main/CONTRIBUTING.md#developer-workflow)
followed

Release-As: v10.7.0-uds.4
  • Loading branch information
zachariahmiller authored Dec 4, 2024
1 parent 1895cc7 commit 423ceb4
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions values/common-values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,9 @@ prometheusMonitoring:
initSysctl:
enabled: false

initFs:
enabled: false

jdbcOverwrite:
enable: true # DEPRECATED: use `jdbcOverwrite.enabled` in v10.7.0
enabled: true
Expand Down

0 comments on commit 423ceb4

Please sign in to comment.