fix: permissions of clickhouse job

tutorcairn/patches/k8s-jobs

@@ -9,6 +9,9 @@ spec:
   template:
     spec:
       restartPolicy: Never
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
       containers:
         - name: cairn-clickhouse
           image: {{ CAIRN_CLICKHOUSE_DOCKER_IMAGE }}
@@ -18,6 +21,8 @@ spec:
               subPath: auth.json
             - mountPath: /etc/clickhouse-server/migrations.d
               name: migrations
+          securityContext:
+            allowPrivilegeEscalation: false
       volumes:
         - name: clickhouse-auth
           configMap:

tutorcairn/patches/local-docker-compose-jobs-services

@@ -1,5 +1,6 @@
 cairn-clickhouse-job:
     image: {{ CAIRN_CLICKHOUSE_DOCKER_IMAGE }}
+    user: "1000:1000"
     depends_on: {{ [("cairn-clickhouse", CAIRN_RUN_CLICKHOUSE)]|list_if }}
     volumes:
         - ../plugins/cairn/apps/clickhouse/auth.json:/scripts/clickhouse-auth.json:ro