From 95d82a70b449df9c32eaef394a861256f707f7f3 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Thu, 11 Jun 2026 11:28:04 +0300
Subject: [PATCH] Allow writable filesystem for contour PostgreSQL

---
 .../yc-infra-prod/infrastructure/patches/postgresql.yaml     | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml b/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml
index 3a01831..d1756ad 100644
--- a/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml
+++ b/clusters/yc-infra-prod/infrastructure/patches/postgresql.yaml
@@ -18,6 +18,8 @@ spec:
       pullPolicy: IfNotPresent
     postgresqlSharedPreloadLibraries: "timescaledb,pg_stat_statements"
     primary:
+      containerSecurityContext:
+        readOnlyRootFilesystem: false
       extendedConfiguration: |-
         fsync = off
         full_page_writes = off
@@ -51,6 +53,9 @@ spec:
       persistence:
         storageClass: database-storage
         size: 500Gi
+    metrics:
+      containerSecurityContext:
+        readOnlyRootFilesystem: false
     contour:
       enabled: true
       vault: