diff --git a/metropolis/node/kubernetes/reconciler/resources_csi.go b/metropolis/node/kubernetes/reconciler/resources_csi.go
index 04d52a8..24939f0 100644
--- a/metropolis/node/kubernetes/reconciler/resources_csi.go
+++ b/metropolis/node/kubernetes/reconciler/resources_csi.go
@@ -57,6 +57,7 @@
 }
 
 func (r resourceCSIDrivers) Expected() map[string]interface{} {
+	fsGroupPolicy := storage.FileFSGroupPolicy
 	return map[string]interface{}{
 		csiProvisionerName: &storage.CSIDriver{
 			ObjectMeta: meta.ObjectMeta{
@@ -67,6 +68,8 @@
 				AttachRequired:       False(),
 				PodInfoOnMount:       False(),
 				VolumeLifecycleModes: []storage.VolumeLifecycleMode{storage.VolumeLifecyclePersistent},
+				// TODO(#288): Make sure this gets applied to existing clusters
+				FSGroupPolicy: &fsGroupPolicy,
 			},
 		},
 	}