🐛 Run task pods with hub UID

Signed-off-by: Jason Montleon <[email protected]>

task/manager.go

@@ -7,6 +7,7 @@ import (
 	"fmt"
 	"io"
 	"os"
+	"os/user"
 	"path"
 	"sort"
 	"strconv"
@@ -1699,6 +1700,14 @@ func (r *Task) containers(
 			},
 		},
 	}
+	user, err := user.Current()
+	if err != nil {
+		err = liberr.Wrap(err)
+	}
+	uid, err := strconv.ParseInt(user.Uid, 10, 64)
+	if err != nil {
+		err = liberr.Wrap(err)
+	}
 	plain = append(plain, addon.Spec.Container)
 	plain[0].Name = "addon"
 	for i := range extensions {
@@ -1714,6 +1723,9 @@ func (r *Task) containers(
 		container := &plain[i]
 		injector.Inject(container)
 		r.propagateEnv(&plain[0], container)
+		container.SecurityContext = &core.SecurityContext{
+			RunAsUser: &uid,
+		}
 		container.VolumeMounts = append(
 			container.VolumeMounts,
 			core.VolumeMount{