fixup! fixup! fixup! Ensure that jobs run with the controller service account if no service account is specified.

chart/values.yaml

@@ -12,7 +12,7 @@ sa:
         - ALL
     image:
       repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-operator
-      tag: 0.2.17
+      tag: 0.2.20
     resources:
       limits:
         cpu: 500m
@@ -20,6 +20,8 @@ sa:
       requests:
         cpu: 10m
         memory: 64Mi
+  podSecurityContext:
+    runAsNonRoot: true
   replicas: 1
   serviceAccount:
     annotations: {}