feat: run workload and charm as unprivileged user

Signed-off-by: Dario Faccin <[email protected]>

Author: dariofaccin

charms/jupyter-controller/metadata.yaml

@@ -8,6 +8,8 @@ issues: https://github.com/canonical/notebook-operators/issues
 containers:
   jupyter-controller:
     resource: oci-image
+    uid: 584792
+    gid: 584792
 resources:
   oci-image:
     type: oci-image
@@ -23,3 +25,4 @@ requires:
   logging:
     interface: loki_push_api
     optional: true
+charm-user: non-root

charms/jupyter-ui/metadata.yaml

@@ -8,6 +8,8 @@ issues: https://github.com/canonical/notebook-operators/issues
 containers:
   jupyter-ui:
     resource: oci-image
+    uid: 584792
+    gid: 584792
 resources:
   oci-image:
     type: oci-image
@@ -59,3 +61,4 @@ requires:
   logging:
     interface: loki_push_api
     optional: true
+charm-user: non-root