lsio has inbuilt permission controls

apps/sonarr/deployment.yaml

@@ -42,6 +42,11 @@ spec:
         - name: sonarr
           image: lscr.io/linuxserver/sonarr:4.0.8
           imagePullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: "1000"
+            - name: PGID
+              value: "1000"
           livenessProbe:
             httpGet:
               path: /ping
@@ -67,7 +72,4 @@ spec:
       volumes:
         - name: config
           persistentVolumeClaim:
-            claimName: sonarr
-      securityContext:
-        runAsUser: 1000
-        runAsGroup: 1000
+            claimName: sonarr