diff --git a/prod-upgrade/mongo/mongo.yaml b/prod-upgrade/mongo/mongo.yaml
index c2d5698..2bb0161 100644
--- a/prod-upgrade/mongo/mongo.yaml
+++ b/prod-upgrade/mongo/mongo.yaml
@@ -24,8 +24,13 @@ spec:
             sysctl -w net.ipv4.tcp_keepalive_time=300
             sysctl -w net.ipv4.tcp_keepalive_intvl=10
             sysctl -w net.ipv4.tcp_keepalive_probes=3
+            chmod 400 /etc/mongodb/keyfile.key
           securityContext:
             privileged: true
+          volumeMounts:
+            - name: mongo-keyfile
+              mountPath: /etc/mongodb/keyfile.key
+              subPath: keyfile.key
       containers:
         - name: mongo
           image: mongo:6.0