diff --git a/clusters/wb/infrastructure/patches/prometheus-stack.yaml b/clusters/wb/infrastructure/patches/prometheus-stack.yaml
index 8fd3c78..91857fc 100644
--- a/clusters/wb/infrastructure/patches/prometheus-stack.yaml
+++ b/clusters/wb/infrastructure/patches/prometheus-stack.yaml
@@ -86,6 +86,19 @@ spec:
                   - pilot
     grafana:
       enabled: true
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 472
+        runAsGroup: 472
+        fsGroup: 472
+      initChownData:
+        enabled: true
+        securityContext:
+          runAsNonRoot: false
+          runAsUser: 0
+          capabilities:
+            add: ["CHOWN"]
+            drop: ["ALL"]
       adminUser: grafana-admin
       admin:
         existingSecret: grafana-admin