diff --git a/infrastructure/postgres/release.yaml b/infrastructure/postgres/release.yaml
index e9f02292d48263d998a7f41ee4e7c44c1d963386..64dc5f9610df2b5078d15cdef541b35b344736e4 100644
--- a/infrastructure/postgres/release.yaml
+++ b/infrastructure/postgres/release.yaml
@@ -22,3 +22,5 @@ spec:
     # Required due to OpenShift magic
     securityContext:
       runAsUser: null
+      readOnlyRootFilesystem: true
+      allowPrivilegeEscalation: false