Update Grafana securityContext in Prometheus Stack to enforce non-root user settings

clusters/wb/infrastructure/patches/prometheus-stack.yaml

@@ -86,6 +86,19 @@ spec:
                   - pilot
     grafana:
       enabled: true
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 472
+        runAsGroup: 472
+        fsGroup: 472
+      initChownData:
+        enabled: true
+        securityContext:
+          runAsNonRoot: false
+          runAsUser: 0
+          capabilities:
+            add: ["CHOWN"]
+            drop: ["ALL"]
       adminUser: grafana-admin
       admin:
         existingSecret: grafana-admin