# Is it possible to run SonarQube Helm chart without high privileges?

**URL:** <https://community.sonarsource.com/t/is-it-possible-to-run-sonarqube-helm-chart-without-high-privileges/96441>\
**Category:** SonarQube Server / Community Build\
**Tags:** helm\
**Created:** [July 27, 2023, 1:26pm UTC](https://community.sonarsource.com/t/is-it-possible-to-run-sonarqube-helm-chart-without-high-privileges/96441 "2023-07-27T13:26:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rcsilva83](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/rcsilva83/32/14207_2.png) [@rcsilva83](https://community.sonarsource.com/u/rcsilva83)\
**Post date:** [July 27, 2023, 1:26pm UTC](https://community.sonarsource.com/t/is-it-possible-to-run-sonarqube-helm-chart-without-high-privileges/96441/1 "2023-07-27T13:26:02Z")

</div>

Hi,

I’m trying to migrate my Sonarqube instalation to Kubernetes but we use OpenShift and the SCC requires `allowPrivilegedContainer` and `allowPrivilegeEscalation` which is a problem for the Kubernetes team.

They asked me it this is really required for running Sonarqube and I ask you guys. Is there any way to run the Helm Chart without these privileges? More especifically: is this only needed for Elasticsearch? Would it be possible to point to an external Elasticsearch instalation?

Regards,

Rodrigo

---

<div class="post-metadata">

**Author:** ![ganncamp](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/ganncamp/32/1261_2.png) [@ganncamp](https://community.sonarsource.com/u/ganncamp)\
**Post date:** [July 28, 2023, 2:51pm UTC](https://community.sonarsource.com/t/is-it-possible-to-run-sonarqube-helm-chart-without-high-privileges/96441/2 "2023-07-28T14:51:42Z")

</div>

Hi Rodrigo,

Regarding your permissions questions, perhaps [the docs](https://docs.sonarsource.com/sonarqube/9.8/setup-and-upgrade/deploy-on-kubernetes/deploy-sonarqube-on-kubernetes/) will help.

Regarding Elasticsearch, no it’s not possible to use an external ES instance.

&nbsp;  
HTH,  
Ann

---

<div class="post-metadata">

**Author:** ![rcsilva83](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/rcsilva83/32/14207_2.png) [@rcsilva83](https://community.sonarsource.com/u/rcsilva83)\
**Post date:** [July 29, 2023, 1:43am UTC](https://community.sonarsource.com/t/is-it-possible-to-run-sonarqube-helm-chart-without-high-privileges/96441/3 "2023-07-29T01:43:18Z")

</div>

Thanks, Ann. I don’t know it this is a big issue for other users but, if it is, maybe SonarSource could evaluate replace Elasticsearch by something with less intrusive requirements…

Regards!

---

<div class="post-metadata">

**Author:** ![system](https://dub1.discourse-cdn.com/sonarsource/user_avatar/community.sonarsource.com/system/32/31083_2.png) [@system](https://community.sonarsource.com/u/system)\
**Post date:** [August 7, 2023, 11:29am UTC](https://community.sonarsource.com/t/is-it-possible-to-run-sonarqube-helm-chart-without-high-privileges/96441/5 "2023-08-07T11:29:45Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.