defaultBaseImage: gcr.io/distroless/static:nonroot