We decided on only runAsNonRoot for now

Author: sbernauer

crates/stackable-operator/CHANGELOG.md

@@ -8,6 +8,7 @@ All notable changes to this project will be documented in this file.
 
 - BREAKING: `PodSecurityContextBuilder::new` was removed in favor of `PodSecurityContextBuilder::with_stackable_defaults` ([#XXXX]).
   This function already sets up some defaults we want to use across the platform.
+  Currently this is `runAsNonRoot: true`, which might cause product Pods to crash and require changes.
 - BREAKING: `PodSecurityContextBuilder::run_as_non_root` now takes a `bool` instead of assuming consumers always want to set it to `true` ([#XXXX]).
   This is needed to allow users setting it to `false` in case the new `with_stackable_defaults` functions set's it to `true`.
 

crates/stackable-operator/src/builder/pod/security.rs

@@ -163,6 +163,10 @@ pub struct PodSecurityContextBuilder {
 
 impl PodSecurityContextBuilder {
     /// Construct a new [`PodSecurityContextBuilder`] that is pre-filled with Stackable's defaults.
+    ///
+    /// Currently the defaults are:
+    ///
+    /// * `runAsNonRoot: true`
     pub fn with_stackable_defaults() -> Self {
         Self {
             pod_security_context: Self::stackable_default_pod_security_context(),
@@ -172,10 +176,8 @@ impl PodSecurityContextBuilder {
     /// The Stackable's defaults for a [`PodSecurityContext`].
     ///
     /// It is recommended to use the [`PodSecurityContextBuilder::with_stackable_defaults`] instead
-    /// (if possible).
+    /// (if possible). Have a look at it's documentation for details.
     pub fn stackable_default_pod_security_context() -> PodSecurityContext {
-        todo!("Lars needs to define the exact settings he wants");
-
         PodSecurityContext {
             run_as_non_root: Some(true),
             ..Default::default()