pub const MOVER_NONROOT_ID: i64 = 65532;Expand description
The nonroot UID/GID baked into the mover image (docker/Dockerfile.mover:
USER 65532:65532, distroless nonroot). The hardened pod context defaults
fsGroup to this so the kubelet group-owns every mounted volume to the gid the
mover actually runs as — most importantly the operator-managed kopia cache, which
is otherwise created root:root on PVC-backed storage and unwritable by the
unprivileged mover. Centralized here (the single source of the hardened defaults)
so the value can never drift from the image.