diff --git a/onedev/helmrelease-onedev.yaml b/onedev/helmrelease-onedev.yaml
index 697ad26..80832ad 100644
--- a/onedev/helmrelease-onedev.yaml
+++ b/onedev/helmrelease-onedev.yaml
@@ -26,6 +26,12 @@ spec:
       securityContext:
         runAsUser: 0
         runAsGroup: 0
+        allowPrivilegeEscalation: true
+        capabilities:
+          add:
+          - CHOWN
+          - FOWNER
+          - DAC_OVERRIDE
       volumeMounts:
       - name: data
         mountPath: /opt/onedev