diff --git a/k8s/core/kanidm/statefulset.yaml b/k8s/core/kanidm/statefulset.yaml
index 729c65f..068691a 100644
--- a/k8s/core/kanidm/statefulset.yaml
+++ b/k8s/core/kanidm/statefulset.yaml
@@ -16,6 +16,10 @@ spec:
       labels:
         app: kanidm
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
       containers:
         - name: kanidm
           image: kanidm/server:1.9.3