diff --git a/apps/monitoring/kustomization.yaml b/apps/monitoring/kustomization.yaml
index b854c3d..ca6eff3 100644
--- a/apps/monitoring/kustomization.yaml
+++ b/apps/monitoring/kustomization.yaml
@@ -18,7 +18,7 @@ resources:
 images:
   - name: thanos
     newName: quay.io/thanos/thanos
-    newTag: v0.29.0
+    newTag: v0.34.1
 
 helmCharts:
   - releaseName: grafana
diff --git a/apps/monitoring/prometheus.yaml b/apps/monitoring/prometheus.yaml
index c3c5bbb..8788fb4 100644
--- a/apps/monitoring/prometheus.yaml
+++ b/apps/monitoring/prometheus.yaml
@@ -46,6 +46,8 @@ kind: Prometheus
 metadata:
   name: prometheus
 spec:
+  securityContext:
+    runAsUser: 65534 # same as the thanos sidecar
   resources:
     requests:
       memory: 400Mi