diff --git a/thelounge/statefulset.yaml b/thelounge/statefulset.yaml
index 0b2029d..91d89dc 100644
--- a/thelounge/statefulset.yaml
+++ b/thelounge/statefulset.yaml
@@ -4,6 +4,8 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: thelounge
+  annotations:
+    polaris.fairwinds.com/runAsRootAllowed-exempt: "true" # linuxserver.io images don't support this, need to build my own
 spec:
   selector:
     matchLabels:
@@ -22,7 +24,6 @@ spec:
         image: ghcr.io/thelounge/thelounge:latest
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
         ports:
         - containerPort: 9000
           name: http-9000
diff --git a/znc/statefulset.yaml b/znc/statefulset.yaml
index 88b8635..fed71a3 100644
--- a/znc/statefulset.yaml
+++ b/znc/statefulset.yaml
@@ -4,6 +4,8 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: znc
+  annotations:
+    polaris.fairwinds.com/runAsRootAllowed-exempt: "true" # linuxserver.io images don't support this, need to build my own
 spec:
   selector:
     matchLabels:
@@ -21,7 +23,6 @@ spec:
         image: lscr.io/linuxserver/znc:latest    
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
         ports:
         - containerPort: 6501
           name: irc-6501