Set runAsGroup to 1000 rather than 0 (#283)

# Description

*Please add a description here. This will become the commit message of the merge request later.*

Author: sbernauer

CHANGELOG.md

@@ -4,13 +4,15 @@
 
 ### Changed
 
+- [BREAKING] Use Product image selection instead of version. `spec.version` has been replaced by `spec.image` ([#282]).
 - Updated stackable image versions ([#275]).
 - `operator-rs` `0.24.0` -> `0.27.1` ([#277]).
-- [BREAKING] Use Product image selection instead of version. `spec.version` has been replaced by `spec.image` ([#282]).
+- Set runAsGroup to 1000 rather than 0 ([#283]).
 
 [#275]: https://github.com/stackabletech/hbase-operator/pull/275
 [#277]: https://github.com/stackabletech/hbase-operator/pull/277
 [#282]: https://github.com/stackabletech/hbase-operator/pull/282
+[#283]: https://github.com/stackabletech/hbase-operator/pull/283
 
 ## [0.5.0] - 2022-11-07
 

rust/operator-binary/src/hbase_controller.rs

@@ -641,9 +641,9 @@ fn build_rolegroup_statefulset(
                 .service_account_name(sa_name)
                 .security_context(
                     PodSecurityContextBuilder::new()
-                        .run_as_user(rbac::HBASE_UID)
-                        .run_as_group(0)
-                        .fs_group(1000) // Needed for secret-operator
+                        .run_as_user(1000)
+                        .run_as_group(1000)
+                        .fs_group(1000)
                         .build(),
                 )
                 .build_template(),

rust/operator-binary/src/rbac.rs

@@ -3,9 +3,6 @@ use stackable_operator::k8s_openapi::api::core::v1::ServiceAccount;
 use stackable_operator::k8s_openapi::api::rbac::v1::{RoleBinding, RoleRef, Subject};
 use stackable_operator::kube::{Resource, ResourceExt};
 
-/// Used as runAsUser in the pod security context. This is specified in the Hbase image file
-pub const HBASE_UID: i64 = 1000;
-
 /// Build RBAC objects for the product workloads.
 /// The `rbac_prefix` is meant to be the product name, for example: zookeeper, airflow, etc.
 /// and it is a assumed that a ClusterRole named `{rbac_prefix}-clusterrole` exists.