Skip to content

Conversation

@RafalKorepta
Copy link
Contributor

@RafalKorepta RafalKorepta commented Nov 4, 2025

All credits goes to @maksym-iv.

Fixes #1162

@RafalKorepta RafalKorepta force-pushed the rk/gh-1162/security-context-set-to-false branch from b6dc34d to 6eea667 Compare November 4, 2025 15:25
Copy link
Contributor

@chrisseto chrisseto left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we backport this to at least v2.4.x?

And just to check, did we verify that this works as expected? There are no test cases where statefulset.podTemplate.spec.securityContext.runAsNonRoot is set to true.

@github-actions
Copy link

This PR is stale because it has been open 5 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions
Copy link

This PR is stale because it has been open 5 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions github-actions bot added the stale label Nov 16, 2025
@github-actions
Copy link

This PR was closed because it has been stalled for 5 days with no activity.

@github-actions github-actions bot closed this Nov 22, 2025
@RafalKorepta RafalKorepta reopened this Nov 22, 2025
@github-actions
Copy link

This PR is stale because it has been open 5 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions
Copy link

github-actions bot commented Dec 4, 2025

This PR is stale because it has been open 5 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions
Copy link

This PR is stale because it has been open 5 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions github-actions bot added the stale label Dec 10, 2025
@RafalKorepta RafalKorepta merged commit f187f32 into main Dec 16, 2025
15 checks passed
@RafalKorepta
Copy link
Contributor Author

I can confirm that running the following command:

helm install rk-test ./charts/redpanda/chart -f test.yaml

where the test.yaml file contains:

statefulset:
  podTemplate:
    spec:
      initContainers:
      - name: tuning
        securityContext:
          runAsNonRoot: true

results with the following error:

Error: container's runAsUser breaks non-root policy (pod: "rk-test-0_default(351e9a8d-b99a-4f5a-ad64-1281aff6f1c5)", container: tuning)

@RafalKorepta RafalKorepta deleted the rk/gh-1162/security-context-set-to-false branch December 16, 2025 12:13
@github-actions
Copy link

💔 Some backports could not be created

Status Branch Result
release/v2.4.x
release/v2.3.x An unhandled error occurred. Please see the logs for details
release/v25.1.x
release/v25.2.x An unhandled error occurred. Please see the logs for details

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

backport --pr 1165

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

@github-actions
Copy link

💔 Some backports could not be created

Status Branch Result
release/v2.4.x
release/v2.3.x
release/v25.1.x An unhandled error occurred. Please see the logs for details
release/v25.2.x

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

backport --pr 1165

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

@github-actions
Copy link

💔 Some backports could not be created

Status Branch Result
release/v2.4.x An unhandled error occurred. Please see the logs for details
release/v2.3.x
release/v25.1.x
release/v25.2.x

Note: Successful backport PRs will be merged automatically after passing CI.

Manual backport

To create the backport manually run:

backport --pr 1165

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

@github-actions
Copy link

💚 All backports created successfully

Status Branch Result
release/v2.4.x
release/v2.3.x
release/v25.1.x
release/v25.2.x

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

@david-yu
Copy link
Contributor

@RafalKorepta I think you forgot 25.3, I think 2.4.x and 2.3.x are optional to backport.

@github-actions
Copy link

💚 All backports created successfully

Status Branch Result
release/v25.3.x

Note: Successful backport PRs will be merged automatically after passing CI.

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

fix: RedPanda Helm install with "statefulset.podTemplate.spec.securityContext.runAsNonRoot"

5 participants