NO-JIRA fix securityContext sysctl: run the initSysctl initcontainer as root user from values

Co-authored-by: HAUTIN Mikaël <mikael.hautin@forvia.com>

Author: Mikaciu

charts/sonarqube-dce/CHANGELOG.md

@@ -4,6 +4,7 @@ All changes to this chart will be documented in this file.
 ## [10.4.0]
 * Update Chart's version to 10.4.0
 * Improve the description of deprecated `ApplicationNodes.jvmOpts` and `ApplicationNodes.jvmCeOpts` values
+* Run the initSysctl init-container as root to prevent 'permission denied' issues
 
 ## [10.3.0]
 * Upgrade SonarQube to 10.3.0
@@ -239,7 +240,7 @@ All changes to this chart will be documented in this file.
 * added link to community support forum
 
 ## [0.1.6]
-* fixed wrong scc user reference if name was explicitly set 
+* fixed wrong scc user reference if name was explicitly set
 
 ## [0.1.5]
 * fixed serviceaccount logic

charts/sonarqube-dce/Chart.yaml

@@ -31,6 +31,8 @@ annotations:
       description: "Update Chart's version to 10.4.0"
     - kind: fixed
       description: "Improve the description of deprecated 'ApplicationNodes.jvmOpts' and 'ApplicationNodes.jvmCeOpts' values"
+    - kind: fixed
+      description: "Run the initSysctl init-container as root to prevent 'permission denied' issues"
   artifacthub.io/links: |
     - name: support
       url: https://community.sonarsource.com/

charts/sonarqube-dce/values.yaml

@@ -461,6 +461,8 @@ initSysctl:
   securityContext:
     # Compatible with podSecurity standard privileged
     privileged: true
+    # if run without root permissions, error "sysctl: permission denied on key xxx, ignoring"
+    runAsUser: 0
   # resources: {}
 
 initFs:

charts/sonarqube/CHANGELOG.md

@@ -4,6 +4,7 @@ All changes to this chart will be documented in this file.
 ## [10.4.0]
 * Update Chart's version to 10.4.0
 * Improve the description of deprecated `jvmOpts` and `jvmCeOpts` values
+* Run the initSysctl init-container as root to prevent 'permission denied' issues
 
 ## [10.3.0]
 * Upgrade SonarQube to 10.3.0

charts/sonarqube/Chart.yaml

@@ -36,6 +36,8 @@ annotations:
       description: "Update Chart's version to 10.4.0"
     - kind: fixed
       description: "Improve the description of deprecated 'jvmOpts' and 'jvmCeOpts' values"
+    - kind: fixed
+      description: "Run the initSysctl init-container as root to prevent 'permission denied' issues"
   artifacthub.io/containsSecurityUpdates: "false"
   artifacthub.io/images: |
     - name: sonarqube

charts/sonarqube/values.yaml

@@ -243,6 +243,8 @@ initSysctl:
   securityContext:
     # Compatible with podSecurity standard privileged
     privileged: true
+    # if run without root permissions, error "sysctl: permission denied on key xxx, ignoring"
+    runAsUser: 0
   # resources: {}
 
 # This should not be required anymore, used to chown/chmod folder created by faulty CSI driver that are not applying properly POSIX fsgroup.