diff --git a/metacontroller/values.yaml b/metacontroller/values.yaml
index c6ca11a6f..29e230ba4 100644
--- a/metacontroller/values.yaml
+++ b/metacontroller/values.yaml
@@ -74,10 +74,12 @@ pod:
         default: 10
   security_context:
     metacontroller:
+      pod:
+        runAsUser: 34356
       container:
         metacontroller:
-          runAsUser: 34356
           readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
 
 endpoints:
   cluster_domain_suffix: cluster.local