https://xuezenghui.com/posts/run-frontend-container-as-non-root-in-k8s/