diff --git a/kube/deploy/apps/media/plex/app/hr.yaml b/kube/deploy/apps/media/plex/app/hr.yaml
index cd935303..05c17ac0 100644
--- a/kube/deploy/apps/media/plex/app/hr.yaml
+++ b/kube/deploy/apps/media/plex/app/hr.yaml
@@ -142,7 +142,7 @@ spec:
         runAsUser: &uid 6969
         runAsGroup: *uid
         fsGroup: *uid
-        fsGroupChangePolicy: OnRootMismatch
+        fsGroupChangePolicy: Always
         seccompProfile: { type: "RuntimeDefault" }
       topologySpreadConstraints:
         - maxSkew: 1