diff --git a/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml b/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml
index d86ce79da..163c2f250 100644
--- a/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml
+++ b/clusters/cl01tl/manifests/yubal/Deployment-yubal.yaml
@@ -29,6 +29,11 @@ spec:
       enableServiceLinks: false
       serviceAccountName: default
       automountServiceAccountToken: true
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
+        runAsGroup: 1000
+        runAsUser: 1000
       hostIPC: false
       hostNetwork: false
       hostPID: false