diff --git a/apps/templates/mbgwp-helm.yaml b/apps/templates/mbgwp-helm.yaml
index fbbd42e..73d7de9 100644
--- a/apps/templates/mbgwp-helm.yaml
+++ b/apps/templates/mbgwp-helm.yaml
@@ -72,10 +72,26 @@ spec:
           ##
           annotations: {}
         allowEmptyPassword: true
-        volumePermissions:
-          ## @param volumePermissions.enabled Enable init container that changes the owner/group of the PV mount point to `runAsUser:fsGroup`
-          ##
+        containerSecurityContext:
           enabled: true
+          seLinuxOptions: {}
+          runAsUser: 1001
+          runAsGroup: 0
+          runAsNonRoot: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
+          seccompProfile:
+            type: "RuntimeDefault
+        podSecurityContext:
+          enabled: true
+          fsGroupChangePolicy: Always
+          sysctls: []
+          supplementalGroups:
+            - 6
+          fsGroup: 1001
 
   syncPolicy:
     syncOptions: