diff --git a/prod-upgrade/prom/prometheus.yaml b/prod-upgrade/prom/prometheus.yaml
index baf560d..a9016ed 100644
--- a/prod-upgrade/prom/prometheus.yaml
+++ b/prod-upgrade/prom/prometheus.yaml
@@ -66,6 +66,9 @@ spec:
       containers:
       - name: prometheus
         image: prom/prometheus:v2.51.2
+        securityContext:
+          runAsUser: 1000
+          allowPrivilegeEscalation: false
         args:
           - --config.file=/etc/prometheus/prometheus.yaml
           - --storage.tsdb.path=/prometheus/data