diff --git a/charts/mastodon/tests/__snapshot__/98_snapshot_test.yaml.snap b/charts/mastodon/tests/__snapshot__/98_snapshot_test.yaml.snap
index da0bc7881cabbeb41d579a251cf0d9d4c70d8058..56086fb0395402668514f0a939132a7784390794 100644
--- a/charts/mastodon/tests/__snapshot__/98_snapshot_test.yaml.snap
+++ b/charts/mastodon/tests/__snapshot__/98_snapshot_test.yaml.snap
@@ -337,6 +337,9 @@ should match basic snapshot:
                 httpGet:
                   path: /health
                   port: http
+              securityContext:
+                allowPrivilegeEscalation: false
+                readOnlyRootFilesystem: true
               startupProbe:
                 failureThreshold: 30
                 httpGet:
@@ -755,17 +758,6 @@ should match basic snapshot:
       name: RELEASE-NAME-mastodon
     type: Opaque
   15: |
-    apiVersion: v1
-    kind: ServiceAccount
-    metadata:
-      labels:
-        app.kubernetes.io/instance: RELEASE-NAME
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: mastodon
-        app.kubernetes.io/version: 4.5.6
-        helm.sh/chart: mastodon-1.2.3
-      name: RELEASE-NAME-mastodon
-  16: |
     apiVersion: v1
     kind: Service
     metadata:
@@ -787,7 +779,7 @@ should match basic snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/name: mastodon
       type: ClusterIP
-  17: |
+  16: |
     apiVersion: v1
     kind: Service
     metadata:
@@ -809,3 +801,14 @@ should match basic snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/name: mastodon
       type: ClusterIP
+  17: |
+    apiVersion: v1
+    kind: ServiceAccount
+    metadata:
+      labels:
+        app.kubernetes.io/instance: RELEASE-NAME
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: mastodon
+        app.kubernetes.io/version: 4.5.6
+        helm.sh/chart: mastodon-1.2.3
+      name: RELEASE-NAME-mastodon