diff --git a/resources/manifests/kube-apiserver.yaml b/resources/manifests/kube-apiserver.yaml
index bda9238c..30e6004d 100644
--- a/resources/manifests/kube-apiserver.yaml
+++ b/resources/manifests/kube-apiserver.yaml
@@ -73,6 +73,9 @@ spec:
         - name: ssl-certs-host
           mountPath: /etc/ssl/certs
           readOnly: true
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
       volumes:
       - name: secrets
         secret: