Milvus-operator as a config init container image should support run as non root

[haorenfsa]

#464

[adalimayeu]

hi @haorenfsa, tried to run the tests locally, and there are some findings:

1. In the kind cluster used for tests, no seccomp profile is defined. Therefore, we need to set seccompProfile.type=Unconfined, or alternatively add seccomp options to the kind cluster manifest. For now, I’ve set Unconfined, and it resolved the issue. (btw the same is done in milvus repo docker-compose files)

2. The config container works fine with all securityContext features enabled (including capabilities.drop=['ALL']).

3. At the same time, the main container still has issues. It appears that we need to wait for the Milvus 2.6.11 release. As far as I can see, the commit that patches the Dockerfile is in master and seems to be included in the next version, as in 2.6.10 tag root user is still heavily used

ERROR: ld.so: object '/milvus/lib/libjemalloc.so' from LD_PRELOAD cannot be preloaded (cannot open shared object file): ignored.
ERROR: ld.so: object '/milvus/lib/libjemalloc.so' from LD_PRELOAD cannot be preloaded (cannot open shared object file): ignored.
2026/02/04 16:01:20 missing source yaml
2026/02/04 16:01:20 missing source yaml
2026/02/04 16:01:20 parse user.yaml failed: open file[/milvus/configs/operator/user.yaml] failed: open /milvus/configs/operator/user.yaml: permission denied
Stream closed EOF for milvus-sit/milvus-milvus-standalone-0-64cd49db9c-85bh7 (standalone)

or

[2026/02/04 14:33:46.969 +00:00] [FATAL] [paramtable/component_param.go:4122] ["failed to mkdir"] [localStoragePath=/var/lib/milvus/data/] 
[error="mkdir /var/lib/milvus: permission denied"] [stack="github.com/milvus-io/milvus/pkg/v2/util/paramtable.(*queryNodeConfig).init.func24
  /workspace/source/pkg/util/paramtable/component_param.go:4122
github.com/milvus-io/milvus/pkg/v2/util/paramtable.(*ParamItem).getWithRaw
  /workspace/source/pkg/util/paramtable/param_item.go:153
github.com/milvus-io/milvus/pkg/v2/util/paramtable.(*ParamItem).get