MLE-24837 Fix Security bugs reported by Poraris

[pengzhouml]

No description provided.

[Copilot]

Pull Request Overview

This PR addresses security vulnerabilities identified by Polaris by implementing defensive nil checks, proper error handling, and enhanced container security configurations.

Key Changes:

• Added nil pointer protection checks in statefulset generation and environment variable handling
• Improved error handling by properly returning errors instead of discarding them
• Enhanced container security by enabling read-only root filesystem across all manager configurations

Reviewed Changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
pkg/k8sutil/statefulset.go	Added nil checks for persistence and GroupConfig to prevent potential nil pointer dereferences
pkg/k8sutil/marklogicServer.go	Fixed error handling to return errors instead of silently discarding them
pkg/k8sutil/haProxy.go	Properly handled hash.Write return values to address unchecked error warnings
config/manager/manager.yaml	Added readOnlyRootFilesystem security constraint to container security context
config/default/manager_config_patch.yaml	Added readOnlyRootFilesystem security constraint to container security context
config/default/manager_auth_proxy_patch.yaml	Added readOnlyRootFilesystem security constraint to container security context

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.