Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[bitnami/postgresql-ha] metrics sidecar uses wrong security context #32951

Open
RobertMiethanerByte opened this issue Apr 10, 2025 · 0 comments
Assignees
Labels
tech-issues The user has a technical issue about an application triage Triage is needed

Comments

@RobertMiethanerByte
Copy link

Name and Version

bitnami/postgresql-ha 15.3.12

What architecture are you using?

amd64

What steps will reproduce the bug?

  1. Enforce Pod Security Standard "restricted" on the target namespace
  2. Deploy helm chart with metrics -> enabled: true
  3. Pods of the postgresql-ha StatefulSet are not created

Are you using any custom parameters or values?

No response

What is the expected behavior?

Pods are created

What do you see instead?

It seems like the template is using the wrong security context for the metricts side car (see postgresql/statefulset.yaml Line 497)

Instead of ContainerSecurityContext the PodSecurityContext is used.

Additional information

No response

@RobertMiethanerByte RobertMiethanerByte added the tech-issues The user has a technical issue about an application label Apr 10, 2025
@github-actions github-actions bot added the triage Triage is needed label Apr 10, 2025
@RobertMiethanerByte RobertMiethanerByte changed the title [bitnami/postgresql-ha] metrics sidecar security context prevents pod creation with Pod Security Standard "Restricted" [bitnami/postgresql-ha] metrics sidecar uses wrong security context Apr 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
tech-issues The user has a technical issue about an application triage Triage is needed
Projects
None yet
Development

No branches or pull requests

2 participants