diff --git a/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml b/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml
index 3a01831..d1756ad 100644
--- a/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml
+++ b/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml
@@ -18,6 +18,8 @@ spec:
       pullPolicy: IfNotPresent
     postgresqlSharedPreloadLibraries: "timescaledb,pg_stat_statements"
     primary:
+      containerSecurityContext:
+        readOnlyRootFilesystem: false
       extendedConfiguration: |-
         fsync = off
         full_page_writes = off
@@ -51,6 +53,9 @@ spec:
       persistence:
         storageClass: database-storage
         size: 500Gi
+    metrics:
+      containerSecurityContext:
+        readOnlyRootFilesystem: false
     contour:
       enabled: true
       vault: