SonarQube kubernetes Pod Security Standards

SonarQube Server / Community Build
1
  • which versions are you using (SonarQube)

Hello , hope you’re doing great.
We are thinking of deploying our SonarQube on kubernetes and we’re not quite understanding the section of the Pod Security Standards.

in the version 9.9 LTA : Pod security standards doc 9.9 LTA

  • Should we set both Baseline and Restricted ?
  • Is it mandatory to have securityContext.privileged=true and securityContext.allowPrivilegeEscalation=true and also running as root ?

*If it is mandatory , why it is not mandatory in the version 10.6 ? Pod security standards DOC 10.6

  • can we use an external Elastic search ?

Thanks in advance

3

Hi @isma, welcome to our community.

We made many improvements to ensure you can use our Helm charts in more restricted environments. That’s why you see different information on 10.6 compared to 9.9.

In terms of Pod Security Standards, it is up to the Kubernetes Administrator to choose which Standard to use. However, it’s important to note that if your cluster uses Baseline or Restricted standards, you may encounter some issues that are outlined in our production use-case notes, which need to be addressed.

This is currently not possible.

1 Like