chore: runAsNonRoot and fix empty CRD fields (#860)

Author: sbernauer

CHANGELOG.md

@@ -11,10 +11,18 @@ All notable changes to this project will be documented in this file.
 - The RBAC ServiceAccount and RoleBinding are now built with the operator-rs `v2::rbac`
   functions and carry the full set of recommended labels ([#846]).
 - Bump stackable-operator to 0.114.0 ([#855]).
+- All product containers now run with `securityContext.runAsNonRoot` set to `true` to improve security ([#860]).
+
+### Fixed
+
+- Fix a longstanding problem of including empty `categories`, `shortNames` and `additionalPrinterColumns` in the CRDs,
+  which could cause problems with GitOps tools (e.g. ArgoCD) reporting a diff in the custom resources.
+  See [our internal issue](https://github.com/stackabletech/hdfs-operator/issues/626) and [the fix](https://github.com/kube-rs/kube/pull/2042) for details ([#860]).
 
 [#841]: https://github.com/stackabletech/druid-operator/pull/841
 [#846]: https://github.com/stackabletech/druid-operator/pull/846
 [#855]: https://github.com/stackabletech/druid-operator/pull/855
+[#860]: https://github.com/stackabletech/druid-operator/pull/860
 
 ## [26.7.0] - 2026-07-21