diff --git a/kube/3-deploy/2-apps/insurgency-sandstorm/2-install.yaml b/kube/3-deploy/2-apps/insurgency-sandstorm/2-install.yaml
index 7240dec0..042dd1a9 100644
--- a/kube/3-deploy/2-apps/insurgency-sandstorm/2-install.yaml
+++ b/kube/3-deploy/2-apps/insurgency-sandstorm/2-install.yaml
@@ -76,6 +76,11 @@ spec:
             mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Config
           - name: saveGames
             mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Saved/SaveGames
+    podSecurityContext:
+      runAsUser: 1000
+      runAsGroup: 1000
+      fsGroup: 1000
+      fsGroupChangePolicy: OnRootMismatch
     persistence:
       mods:
         enabled: true
@@ -119,6 +124,7 @@ spec:
         name: insurgency-sandstorm-gameini
         subPath: Game.ini
         mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Saved/Config/LinuxServer/Game.ini
+        defaultMode: 0777
         readOnly: true
       engineini:
         enabled: true
@@ -126,6 +132,7 @@ spec:
         name: insurgency-sandstorm-engineini
         subPath: Engine.ini
         mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Saved/Config/LinuxServer/Engine.ini
+        defaultMode: 0777
         readOnly: true
       gameusersettingsini:
         enabled: true
@@ -133,6 +140,7 @@ spec:
         name: insurgency-sandstorm-gameusersettingsini
         subPath: GameUserSettings.ini
         mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Saved/Config/LinuxServer/GameUserSettings.ini
+        defaultMode: 0777
         readOnly: true
       adminstxt:
         enabled: true
@@ -140,6 +148,7 @@ spec:
         name: insurgency-sandstorm-adminstxt
         subPath: Admins.txt
         mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Config/Server/Admins.txt
+        defaultMode: 0777
         readOnly: true
       mapcycletxt:
         enabled: true
@@ -147,6 +156,7 @@ spec:
         name: insurgency-sandstorm-mapcycletxt
         subPath: MapCycle.txt
         mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Config/Server/MapCycle.txt
+        defaultMode: 0777
         readOnly: true
       modstxt:
         enabled: true
@@ -154,6 +164,7 @@ spec:
         name: insurgency-sandstorm-modstxt
         subPath: Mods.txt
         mountPath: /home/steam/steamcmd/sandstorm/Insurgency/Config/Server/Mods.txt
+        defaultMode: 0777
         readOnly: true
     resources:
       requests: