diff --git a/.gitignore b/.gitignore
index 0400e09..98fa0a6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,6 +9,7 @@ tmp/
 *.crt
 *.key
 *.csr
+*.srl
 *.pem
 *.der
 *.tmp.*
diff --git a/src/trillian/values/values.yaml b/src/trillian/values/values.yaml
index 1c31955..7ec4bfe 100644
--- a/src/trillian/values/values.yaml
+++ b/src/trillian/values/values.yaml
@@ -5,6 +5,11 @@ mysql:
         port: 3306
         protocol: TCP
         targetPort: 3306
+  securityContext:
+    runAsUser: 1000
+    runAsGroup: 1000
+    runAsNonRoot: true
+    fsGroup: 1000
 
 # the trillian mysql image is already configured with the DB
 # this job does not wait for mysql to come up so will just enter an error state
diff --git a/src/tsa/values/values.yaml b/src/tsa/values/values.yaml
index b827b9d..43c5aa7 100644
--- a/src/tsa/values/values.yaml
+++ b/src/tsa/values/values.yaml
@@ -16,6 +16,9 @@ server:
         port: 2112
         protocol: TCP
         targetPort: 2112
+  ingress:
+    http:
+      enabled: false
 
 namespace:
   name: tsa-system