diff --git a/charts/eck-resources/templates/agent-fleet-server.yaml b/charts/eck-resources/templates/agent-fleet-server.yaml
index 5485eab..d12d8fb 100644
--- a/charts/eck-resources/templates/agent-fleet-server.yaml
+++ b/charts/eck-resources/templates/agent-fleet-server.yaml
@@ -17,7 +17,9 @@ spec:
     podTemplate:
       spec:
         securityContext:
-          fsGroup: 1000  # ✅ this fixes the /usr/share/elastic-agent/state write error
+          runAsUser: 0        # ✅ run the container as root
+          runAsGroup: 0
+          fsGroup: 0
         containers:
           - name: agent
             resources: