diff --git a/kube/mirko.libsonnet b/kube/mirko.libsonnet
index 8f72e8f4..9693e247 100644
--- a/kube/mirko.libsonnet
+++ b/kube/mirko.libsonnet
@@ -103,6 +103,7 @@ local kube = import "kube.libsonnet";
                 main: cfg.container,
             }, 
             nodeSelector: null,
+            securityContext: {},
             container:: error "container(s) must be set",
             ports:: {
                 publicHTTP: {}, // name -> { port: no, dns: fqdn }
@@ -167,6 +168,7 @@ local kube = import "kube.libsonnet";
                         nodeSelector: cfg.nodeSelector,
 
                         serviceAccountName: component.sa.metadata.name,
+                        securityContext: cfg.securityContext,
                     },
                 },
             },