diff --git a/argocd/manifests/alloy-k8s/daemonset.yaml b/argocd/manifests/alloy-k8s/daemonset.yaml
index 81a5cf8..95f780b 100644
--- a/argocd/manifests/alloy-k8s/daemonset.yaml
+++ b/argocd/manifests/alloy-k8s/daemonset.yaml
@@ -15,6 +15,8 @@ spec:
         app: alloy
     spec:
       serviceAccountName: alloy
+      securityContext:
+        fsGroup: 473  # alloy user group
       containers:
         - name: alloy
           image: grafana/alloy:v1.5.1