diff --git a/CHANGELOG.md b/CHANGELOG.md
index a8c643d836..edb53e7ccc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -148,11 +148,15 @@ Adding a new version? You'll need three changes:
 ### Changed
 
 - Update paths of Konnect APIs from `runtime_groups/*` to `control-planes/*`.
-[#4566](https://github.com/Kong/kubernetes-ingress-controller/pull/4566)
+  [#4566](https://github.com/Kong/kubernetes-ingress-controller/pull/4566)
+- Docker images now use UID and GID 1000 to match Kong images. This should have
+  no user-facing effect.
+  [#4911](https://github.com/Kong/kubernetes-ingress-controller/pull/4911)
 - Bump version of gateway API to `1.0.0-rc1` and support `Gateway`, `GatewayClass`
   and `HTTPRoute` in API version `gateway.networking.k8s.io/v1`.
 [#4893](https://github.com/Kong/kubernetes-ingress-controller/pull/4893)
 
+
 ### Added
 
 - Added support for expression-based Kong routes for `TLSRoute`. This requires
diff --git a/Dockerfile b/Dockerfile
index 166a67a97c..78fb390033 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -77,7 +77,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH="${TARGETARCH}" GO111MODULE=on make _build.f
 FROM gcr.io/distroless/static:nonroot AS distroless-fips
 WORKDIR /
 COPY --from=builder-fips /workspace/manager .
-USER 65532:65532
+USER 1000:1000
 
 ENTRYPOINT ["/manager"]
 
@@ -100,6 +100,6 @@ LABEL name="Kong Ingress Controller" \
 
 WORKDIR /
 COPY --from=builder /workspace/bin/manager .
-USER 65532:65532
+USER 1000:1000
 
 ENTRYPOINT ["/manager"]