diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index 22c795d..3beec0a 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -16,6 +16,11 @@ spec:
       labels:
         app: keycloak
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 0
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: keycloak
           image: quay.io/keycloak/keycloak:26.0.7