feat(backend): run the container as non-root

[davidspek]

UID and GID are > 10000 to conform with best practices. See https://avd.aquasec.com/misconfig/kubernetes/general/avd-ksv-0021/ and https://avd.aquasec.com/misconfig/ksv020

Summary

Labels

Test Plan

Checklist

• If required, I have updated the Plural documentation accordingly.
• I have added tests to cover my changes.
• I have added a meaningful title and summary to convey the impact of this PR to a user.
• I have added relevant labels to this PR to help with categorization for release notes.

[stoat-app]

Easy and customizable dashboards for your build system. Learn more about Stoat ↗︎

Static Hosting

Name	Link	Commit	Status
api-coverage	Visit	68fe919	✅
rtc-coverage	Visit	68fe919	✅
core-coverage	Visit	68fe919	✅
cron-coverage	Visit	68fe919	✅
email-coverage	Visit	68fe919	✅
worker-coverage	Visit	68fe919	✅
api-test-results	Visit	68fe919	✅
graphql-coverage	Visit	68fe919	✅
rtc-test-results	Visit	68fe919	✅
core-test-results	Visit	68fe919	✅
cron-test-results	Visit	68fe919	✅
email-test-results	Visit	68fe919	✅
worker-test-results	Visit	68fe919	✅
graphql-test-results	Visit	68fe919	✅

Job Runtime

[michaeljguarino]

let's hold off on this until after product hunt since if it could go wrong it could bring the site down or major parts of plural functionality

[davidspek]

@michaeljguarino I've deployed the images and they all run as expected without any crashes.

[davidspek]

We'll need to configure different ports for the services for this as well.