Pod-level runAsNonRoot:true conflicts with initContainer runAsUser:0. Kubernetes rejects the container. Add explicit override so the initContainer can still run as root to fetch binaries from S3. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>