diff --git a/k8s-specifications/db-deployment.yaml b/k8s-specifications/db-deployment.yaml
index bc94ca7368..0bbc80087b 100644
--- a/k8s-specifications/db-deployment.yaml
+++ b/k8s-specifications/db-deployment.yaml
@@ -28,6 +28,17 @@ spec:
         volumeMounts:
         - mountPath: /var/lib/postgresql/data
           name: db-data
+        resources:
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+        securityContext:
+          runAsUser: 1000
+          runAsNonRoot: true
+          readOnlyRootFilesystem: true
       volumes:
       - name: db-data
         emptyDir: {}