diff --git a/helm/nginx/templates/deployment.yaml b/helm/nginx/templates/deployment.yaml
index 9d9f90f..3275f06 100644
--- a/helm/nginx/templates/deployment.yaml
+++ b/helm/nginx/templates/deployment.yaml
@@ -16,6 +16,7 @@ spec:
     spec:
       securityContext:
         runAsNonRoot: true
+        runAsUser: 101
         seccompProfile:
           type: RuntimeDefault
       containers:
diff --git a/helm/nginx/values.yaml b/helm/nginx/values.yaml
index ea8c341..f4a17e0 100644
--- a/helm/nginx/values.yaml
+++ b/helm/nginx/values.yaml
@@ -2,7 +2,7 @@ replicaCount: 1
 image:
   repository: git.realmanual.ru/pub/cosign-images
   tag: 0.1.0
-  pullPolicy: IfNotPresent
+  pullPolicy: Always
 service:
   type: ClusterIP
   port: 80