diff --git a/charts/eck-resources/templates/agent-fleet-server.yaml b/charts/eck-resources/templates/agent-fleet-server.yaml
index 8090f15..5485eab 100644
--- a/charts/eck-resources/templates/agent-fleet-server.yaml
+++ b/charts/eck-resources/templates/agent-fleet-server.yaml
@@ -16,6 +16,8 @@ spec:
     replicas: 1
     podTemplate:
       spec:
+        securityContext:
+          fsGroup: 1000  # ✅ this fixes the /usr/share/elastic-agent/state write error
         containers:
           - name: agent
             resources: