diff --git a/kured-ds.yaml b/kured-ds.yaml
index 6772f020c..d0ee4acdb 100644
--- a/kured-ds.yaml
+++ b/kured-ds.yaml
@@ -53,13 +53,12 @@ spec:
                 fieldRef:
                   fieldPath: spec.nodeName
           volumeMounts:
-            - mountPath: /var/run
+            - mountPath: /sentinel
               name: sentinel
-              # This can't be read-only because the service-account-token is mounted within the same directory
-              # This would cause a crash at startup
-              readOnly: false
+              readOnly: true
           command:
             - /usr/bin/kured
+            - --reboot-sentinel=/sentinel/reboot-required
 #            - --force-reboot=false
 #            - --drain-grace-period=-1
 #            - --skip-wait-for-delete-timeout=0
@@ -72,7 +71,6 @@ spec:
 #            - --prometheus-url=http://prometheus.monitoring.svc.cluster.local
 #            - --alert-filter-regexp=^RebootRequired$
 #            - --alert-firing-only=false
-#            - --reboot-sentinel=/var/run/reboot-required
 #            - --prefer-no-schedule-taint=""
 #            - --reboot-sentinel-command=""
 #            - --slack-hook-url=https://hooks.slack.com/...