diff --git a/apps/templates/mbgwp-helm.yaml b/apps/templates/mbgwp-helm.yaml
index 448719c..5ce8b3d 100644
--- a/apps/templates/mbgwp-helm.yaml
+++ b/apps/templates/mbgwp-helm.yaml
@@ -73,7 +73,10 @@ spec:
           annotations: {}
         allowEmptyPassword: true
         containerSecurityContext:
+          enabled: true
           runAsUser: 0
+          runAsGroup: 0
+          runAsNonRoot: true
 
   syncPolicy:
     syncOptions: