diff --git a/k8s/deployment.yaml b/k8s/deployment.yaml
index 9bc3445..9881843 100644
--- a/k8s/deployment.yaml
+++ b/k8s/deployment.yaml
@@ -85,7 +85,7 @@ spec:
             readOnlyRootFilesystem: false
             capabilities:
               drop: ["ALL"]
-              add: ["CHOWN", "DAC_OVERRIDE", "FOWNER", "SETGID", "SETUID"]
+              add: ["CHOWN", "DAC_OVERRIDE", "FOWNER", "SETGID", "SETUID", "SYS_CHROOT"]
       volumes:
         - name: state
           emptyDir: {}