feat: set default user and group

[csatib02]

Fixes: #1987

[Copilot]

Pull Request Overview

This PR sets default security context values for the Fluentd logging configuration, addressing issue #1987.

• Set default user and group IDs by modifying SecurityContext and PodSecurityContext
• Introduce non-root execution defaults with explicit RunAsUser, RunAsGroup, and FSGroup values

[pepov]

Relabeled it as a breaking change, so that users who depended on the previous behaviour somehow will take attention

[sebastiangaiser]

@pepov @csatib02 I'm sorry for bothering you but we additionally configured podSecurityContext.seccompProfile.type=RuntimeDefault here. Is the config merged in case I configure some parts of it? 🤔

[csatib02]

@sebastiangaiser
I believe yes, since these are just the defaults. If user input was given for a defaulted value it should be overwritten, if a value was not defaulted then it should be added. Have you checked this?

[sebastiangaiser]

It gets overwritten (LO - 5.3.0):

  securityContext:
    fsGroup: 101
    seccompProfile:
      type: RuntimeDefault

[csatib02]

Yeah this check currently works only if the SecurityContext or in your case PodSecurityContext is nil.
We can add some logic to merge this, but as for this PR it works as intended.

If you would like to add this feel free to open a ticket or PR. :) I would be happy to review!