diff --git a/config/deployment.yaml b/config/deployment.yaml
index b0794dd..6bd794a 100644
--- a/config/deployment.yaml
+++ b/config/deployment.yaml
@@ -20,8 +20,13 @@ spec:
       containers:
       - name: pvc-reaper
         image: git.giftfish.de/ston1th/pvc-reaper
+        imagePullPolicy: Always
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+          capabilities:
+            drop: ["ALL"]
         resources:
           requests:
             cpu: 100m
             memory: 128Mi
-        imagePullPolicy: Always