[tuteng]

Changes

• Expose Secret volume modes and projected volume configuration for operator-managed workloads in both sn-platform and sn-platform-slim.
• Add chart controls for Detector probes, Console init container and Job security contexts, and initialization Job TTLs; harden the Toolset and JWT initialization containers.
• Enable proxy.securityContext.readOnlyRootFilesystem: true by default in both charts. The existing proxy.securityContext template passes this policy to PulsarProxy.spec.pod.securityContext, including the generated check-broker init container with the updated operator.
• Keep optional numeric values such as Secret volume modes and Job TTLs compatible with the Helm version used by chart CI, including explicit 0 values.

Validation

• helm lint passes for both charts with default and all chart CI values files.
• helm template confirms both Proxy CRs contain spec.pod.securityContext.readOnlyRootFilesystem: true by default, and optional numeric fields preserve 0.
• Earlier test releases of both charts reached Ready in the EKS pulsar namespace with a read-only Proxy main container. Live validation of the new operator-generated check-broker context is pending access to the upgraded cluster.

Documentation

• doc — updated both chart READMEs with the operator dependency and Proxy security context behavior.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[github-actions]

@tuteng:Thanks for your contribution. For this PR, do we need to update docs?
(The PR template contains info about doc, which helps others know more about the changes. Can you provide doc-related info in this and future PR descriptions? Thanks)

[github-actions]

@tuteng:Thanks for providing doc info!