A Non-Root User Container would be better

[vanthome]

Even with the operator, the ArarngoDB DB in the container is started with user root. This is bad practice and there should be a normal user that runs it.

[ajanikow]

Hello!

It is already planned, but it will default in 1.4.0.

For now, you can enable it on your deployment using ArangoDeployment SecurityContext (https://github.com/arangodb/kube-arangodb/blob/master/pkg/apis/deployment/v1/server_group_spec.go#L133) and Operator Ephemeral Volumes feature.

Best,
Adam.