you have configured the securityRealm with casc. So this will be applied after the start of Jenkins and will overwrite any securityRealm changes that when Jenkins is running once you restart. You should either move the new config to your override.yaml or remove it from there to not overwrite your changes.