UNCLASSIFIED - NO CUI

bug: nfs init container should have `runAsNonRoot: false`

It seems like in recent versions of k8s, the kubelet doesn't like it when runAsUser is set to 0 but runAsNonRoot is not set to false. The kubelet returns the following policy violation:

Warning  Failed     4m42s (x12 over 6m43s)  kubelet            Error: container's runAsUser breaks non-root policy (pod: "confluence0_confluence(875dbf8e-6e44-44cd-bf78-49d29b962b5e)", container: nfs-permission-fixer)

We should set it by default to runAsNonRoot: false like the Jira chart does here: https://repo1.dso.mil/big-bang/product/community/jira/-/blob/f904e1b2c0022748c81c0a482c9eeeef2f2ac3f2/chart/templates/statefulset.yaml#L69

Appears to affect at least k8s v1.27.12

Edited by Daniel Palmer