OpenShift installation fails with adaptSecurityContext=force & Elasticsearch=disabled

[falko]

Using https://github.com/camunda/camunda-deployment-references/blob/main/aws/rosa-hcp/camunda-versions/8.6/procedure/install/helm-values/scc.yml

and disabling ES leads to:

$helm install camunda camunda/camunda-platform -f ssc.yaml -f camunda-values.yaml

Error: INSTALLATION FAILED: template: camunda-platform/templates/zeebe/1/2/3/4/5/6/7/8/z_compatibility_helpers.tpl:87:30: executing "camunda-platform/templates/zeebe/1/2/3/4/5/6/7/8/z_compatibility_helpers.tpl" at <.Values.elasticsearch.commonLabels>: wrong type for value; expected map[string]interface {}; got interface {}

The relevant source seems to lack a condition:

camunda-platform-helm/charts/camunda-platform-8.6/templates/zeebe/1/2/3/4/5/6/7/8/z_compatibility_helpers.tpl

Lines 86 to 90 in 1190fff

	{{- if eq .Values.global.compatibility.openshift.adaptSecurityContext "force" -}}
	{{- if not (hasKey .Values.elasticsearch.commonLabels "tuned.openshift.io/elasticsearch") -}}
	{{- $_ := set .Values.elasticsearch.commonLabels "tuned.openshift.io/elasticsearch" "" -}}
	{{- end -}}
	{{- end -}}

Interestingly, the same file says:

camunda-platform-helm/charts/camunda-platform-8.6/templates/zeebe/1/2/3/4/5/6/7/8/z_compatibility_helpers.tpl

Line 2 in 1190fff

TODO: Remove the whole file just before 8.6 release.

A workaround is to set an empty commonLabels as in the default values of the Elasticsearch chart:

elasticsearch:
  enabled: false
  commonLabels: {}