allowPrivilegeEscalation access control missing in pubsubplus helm-chart

[nikhilbhadane10]

Hi Team,
We were trying to deploy solace pubsubplus on our environments. But it in security checks it observed the allowPrivilegeEscalation security context property is not set on the statefulset files.

https://github.com/SolaceProducts/pubsubplus-kubernetes-helm-quickstart/blob/master/pubsubplus/templates/solaceStatefulSet.yaml

https://artifacthub.io/packages/helm/solace/pubsubplus?modal=values

When we check the official solace article, there we could see it's recommended setting but same is missing in above manifests files.

Can you please help with this security context property parameter if it's needed for pubsubplus or not?

[bczoma]

Hi @nikhilbhadane10 , this security context property is not required when deployed at Privileged or Baseline Pod security Standards level environments, however required for Restricted level. The Helm chart StatefulSet will be revised for best practices.

[szalapski]

Please fix.

[pha91]

Hi @bczoma,
we also need to deploy the broker in restriced mode.
Could you pls add the SecurityContext config to the official solace helm chart?
Or should we create a PR?