chore: Correct security context to use nonroot user

[jonathan-innis]

Fixes #N/A

Description

This change corrects the runAsUser and runAsGroup to run using the nonroot user. This was previously mapping to another non-root, random user, but wasn't within the valid set of UIDs on older linux kernels (65535). Additionally, distroless and scratch images use a standard "nonroot" user (65532) by default and give permission to certain filepaths on the image. Karpenter uses the public.ecr.aws/eks-distro-build-tooling/eks-distro-minimal-base image by default, which assigns file permission to user 65532

How was this change tested?

Does this change impact docs?

• Yes, PR includes docs updates
• Yes, issue opened: #
• No

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[jonathan-innis]

/karpenter snapshot

[netlify]

✅ Deploy Preview for karpenter-docs-prod canceled.

Name	Link
🔨 Latest commit	b205cd9
🔍 Latest deploy log	https://app.netlify.com/sites/karpenter-docs-prod/deploys/65ee36b4af3359000820daae

[coveralls]

Pull Request Test Coverage Report for Build 8225265076

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 2 unchanged lines in 1 file lost coverage.
• Overall coverage decreased (-0.02%) to 82.743%

---

Files with Coverage Reduction	New Missed Lines	%
pkg/fake/utils.go	2	94.56%

Totals
Change from base Build 8218002295:	-0.02%
Covered Lines:	5303
Relevant Lines:	6409

---

💛 - Coveralls

[github-actions]

Snapshot successfully published to oci://021119463062.dkr.ecr.us-east-1.amazonaws.com/karpenter/snapshot/karpenter:0-b205cd9e59634041d49293fcc120a377379b2edd.
To install you must login to the ECR repo with an AWS account:

aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 021119463062.dkr.ecr.us-east-1.amazonaws.com

helm upgrade --install karpenter oci://021119463062.dkr.ecr.us-east-1.amazonaws.com/karpenter/snapshot/karpenter --version "0-b205cd9e59634041d49293fcc120a377379b2edd" --namespace "kube-system" --create-namespace \
  --set "settings.clusterName=${CLUSTER_NAME}" \
  --set "settings.interruptionQueue=${CLUSTER_NAME}" \
  --set controller.resources.requests.cpu=1 \
  --set controller.resources.requests.memory=1Gi \
  --set controller.resources.limits.cpu=1 \
  --set controller.resources.limits.memory=1Gi \
  --wait

[engedaam]

LGTM 🚀