diff --git a/onedev/helmrelease-onedev.yaml b/onedev/helmrelease-onedev.yaml
index 72b93b4..697ad26 100644
--- a/onedev/helmrelease-onedev.yaml
+++ b/onedev/helmrelease-onedev.yaml
@@ -23,11 +23,14 @@ spec:
     - name: fix-ownership
       image: busybox
       command: ["chown", "-R", "1000:1000", "/opt/onedev"]
+      securityContext:
+        runAsUser: 0
+        runAsGroup: 0
       volumeMounts:
-          - name: data
-            mountPath: /opt/onedev
-          - name: trust-certs
-            mountPath: /opt/onedev/conf/trust-certs
+      - name: data
+        mountPath: /opt/onedev
+      - name: trust-certs
+        mountPath: /opt/onedev/conf/trust-certs
     # Configure Ingress resource
     ingress:
       enabled: true