diff --git a/k8s/shlink/shlink.yaml b/k8s/shlink/shlink.yaml
index 69c1ad2..64168b3 100644
--- a/k8s/shlink/shlink.yaml
+++ b/k8s/shlink/shlink.yaml
@@ -14,6 +14,9 @@ spec:
       labels:
         app: shlink
     spec:
+      securityContext:
+        fsGroup: 1001
+        fsGroupChangePolicy: "OnRootMismatch"
       containers:
       - image: ghcr.io/shlinkio/shlink:latest
         name: shlink