use fixed user id instead of username

Author: fgksgf

charts/tidb-operator/values.yaml

@@ -48,7 +48,8 @@ operator:
 
   # SecurityContext is security config of this component, it will set template.spec.securityContext
   # Refer to https://kubernetes.io/docs/tasks/configure-pod-container/security-context
-  securityContext: {}
+  securityContext:
+    runAsNonRoot: true
   # runAsUser: 1000
   # runAsGroup: 2000
   # fsGroup: 2000

image/Dockerfile

@@ -29,7 +29,7 @@ FROM --platform=$TARGETPLATFORM ghcr.io/pingcap-qe/bases/pingcap-base:v1.10.0@sh
 
 ARG TARGETPLATFORM
 
-USER pingcap:pingcap
+USER 1001:1001
 
 WORKDIR /
 
@@ -41,7 +41,7 @@ FROM --platform=$TARGETPLATFORM ghcr.io/pingcap-qe/bases/pingcap-base:v1.10.0@sh
 
 ARG TARGETPLATFORM
 
-USER pingcap:pingcap
+USER 1001:1001
 
 WORKDIR /
 
@@ -53,7 +53,7 @@ FROM --platform=$TARGETPLATFORM ghcr.io/pingcap-qe/bases/pingcap-base:v1.10.0@sh
 
 ARG TARGETPLATFORM
 
-USER pingcap:pingcap
+USER 1001:1001
 
 WORKDIR /
 
@@ -67,7 +67,7 @@ FROM --platform=$TARGETPLATFORM ghcr.io/pingcap-qe/bases/pingcap-base:v1.10.0@sh
 
 ARG TARGETPLATFORM
 
-USER pingcap:pingcap
+USER 1001:1001
 
 WORKDIR /