diff --git a/modules/kubernetes/hackmd/main.tf b/modules/kubernetes/hackmd/main.tf
index ebc8489e..5ce3f4e6 100644
--- a/modules/kubernetes/hackmd/main.tf
+++ b/modules/kubernetes/hackmd/main.tf
@@ -99,6 +99,9 @@ resource "kubernetes_deployment" "hackmd" {
             protocol       = "TCP"
           }
         }
+        security_context {
+          fs_group = "1500"
+        }
         volume {
           name = "data"
           iscsi {