Do the same thing for SecurityContextBuilder

Author: sbernauer

crates/stackable-operator/CHANGELOG.md

@@ -6,13 +6,14 @@ All notable changes to this project will be documented in this file.
 
 ### Changed
 
-- BREAKING: `PodSecurityContextBuilder::new` was removed in favor of `PodSecurityContextBuilder::with_stackable_defaults` ([#XXXX]).
+- BREAKING: `PodSecurityContextBuilder::new` was removed in favor of `PodSecurityContextBuilder::with_stackable_defaults`
+  (same for `SecurityContextBuilder`) ([#1205]).
   This function already sets up some defaults we want to use across the platform.
   Currently this is `runAsNonRoot: true`, which might cause product Pods to crash and require changes.
-- BREAKING: `PodSecurityContextBuilder::run_as_non_root` now takes a `bool` instead of assuming consumers always want to set it to `true` ([#XXXX]).
+- BREAKING: `PodSecurityContextBuilder::run_as_non_root` now takes a `bool` instead of assuming consumers always want to set it to `true` ([#1205]).
   This is needed to allow users setting it to `false` in case the new `with_stackable_defaults` functions set's it to `true`.
 
-[#XXXX]: https://github.com/stackabletech/operator-rs/pull/XXXX
+[#1205]: https://github.com/stackabletech/operator-rs/pull/1205
 
 ## [0.113.0] - 2026-06-22
 

crates/stackable-operator/src/builder/pod/security.rs

@@ -10,16 +10,29 @@ pub struct SecurityContextBuilder {
 }
 
 impl SecurityContextBuilder {
-    /// Convenience function for a wide use-case.
-    pub fn run_as_root() -> SecurityContext {
-        SecurityContext {
-            run_as_user: Some(0),
-            ..SecurityContext::default()
-        }
+    /// Construct a new [`SecurityContextBuilder`] that is pre-filled with Stackable's defaults.
+    ///
+    /// Currently the defaults are:
+    ///
+    /// * `runAsNonRoot: true`
+    pub fn with_stackable_defaults() -> Self {
+        // We are using the builder functions to ensure that builder functions exist to override these settings.
+        let mut builder = Self {
+            security_context: SecurityContext::default(),
+        };
+
+        // Reason: Running as root is bad
+        builder.run_as_non_root(true);
+
+        builder
     }
 
-    pub fn new() -> Self {
-        Self::default()
+    /// Convenience function for a wide use-case.
+    ///
+    /// Please only use this is really needed.
+    pub fn run_as_root(&mut self) {
+        self.run_as_user(0);
+        self.run_as_non_root(false);
     }
 
     pub fn allow_privilege_escalation(&mut self, value: bool) -> &mut Self {