diff --git a/services/jenkins/deployment.yaml b/services/jenkins/deployment.yaml
index f14d1387..5e531218 100644
--- a/services/jenkins/deployment.yaml
+++ b/services/jenkins/deployment.yaml
@@ -88,6 +88,7 @@ spec:
             - sso.bstein.dev
       securityContext:
         fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
       initContainers:
         - name: install-plugins
           image: jenkins/jenkins:2.528.3-jdk21