diff --git a/k8s/apps/ai-service/overlays/prod/hpa.yaml b/k8s/apps/ai-service/overlays/prod/hpa.yaml
index 0a52feb..bea87c1 100644
--- a/k8s/apps/ai-service/overlays/prod/hpa.yaml
+++ b/k8s/apps/ai-service/overlays/prod/hpa.yaml
@@ -8,7 +8,7 @@ spec:
     apiVersion: apps/v1
     kind: Deployment
     name: utterai-ai-service
-  minReplicas: 2
+  minReplicas: 1
   maxReplicas: 6
   metrics:
     - type: Resource
diff --git a/k8s/apps/backend/overlays/dev/deployment.yaml b/k8s/apps/backend/overlays/dev/deployment.yaml
index 99be791..e1f5224 100644
--- a/k8s/apps/backend/overlays/dev/deployment.yaml
+++ b/k8s/apps/backend/overlays/dev/deployment.yaml
@@ -45,6 +45,20 @@ spec:
             secretKeyRef:
               name: backend-api-secret
               key: DB_PASSWORD
+      - name: db-seed
+        image: "utterai-backend:dev-placeholder"
+        command:
+        - python
+        - scripts/seed_ontology.py
+        envFrom:
+        - configMapRef:
+            name: utterai-api-config
+        env:
+        - name: DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: backend-api-secret
+              key: DB_PASSWORD
       containers:
       - name: api
         image: "utterai-backend:dev-placeholder"
diff --git a/k8s/apps/backend/overlays/prod/deployment-blue.yaml b/k8s/apps/backend/overlays/prod/deployment-blue.yaml
index 2b90074..3560b09 100644
--- a/k8s/apps/backend/overlays/prod/deployment-blue.yaml
+++ b/k8s/apps/backend/overlays/prod/deployment-blue.yaml
@@ -62,6 +62,20 @@ spec:
             secretKeyRef:
               name: backend-api-secret
               key: DB_PASSWORD
+      - name: db-seed
+        image: utterai-backend-blue:prod-placeholder
+        command:
+        - python
+        - scripts/seed_ontology.py
+        envFrom:
+        - configMapRef:
+            name: utterai-api-config
+        env:
+        - name: DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: backend-api-secret
+              key: DB_PASSWORD
       containers:
       - name: api
         image: utterai-backend-blue:prod-placeholder
diff --git a/k8s/apps/backend/overlays/prod/deployment-green.yaml b/k8s/apps/backend/overlays/prod/deployment-green.yaml
index fc71d93..e4e2d40 100644
--- a/k8s/apps/backend/overlays/prod/deployment-green.yaml
+++ b/k8s/apps/backend/overlays/prod/deployment-green.yaml
@@ -62,6 +62,20 @@ spec:
             secretKeyRef:
               name: backend-api-secret
               key: DB_PASSWORD
+      - name: db-seed
+        image: utterai-backend-green:prod-placeholder
+        command:
+        - python
+        - scripts/seed_ontology.py
+        envFrom:
+        - configMapRef:
+            name: utterai-api-config
+        env:
+        - name: DB_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: backend-api-secret
+              key: DB_PASSWORD
       containers:
       - name: api
         image: utterai-backend-green:prod-placeholder
diff --git a/k8s/apps/backend/overlays/prod/patch-deployment.yaml b/k8s/apps/backend/overlays/prod/patch-deployment.yaml
index 6f9cbf1..7f22fe7 100644
--- a/k8s/apps/backend/overlays/prod/patch-deployment.yaml
+++ b/k8s/apps/backend/overlays/prod/patch-deployment.yaml
@@ -29,6 +29,16 @@ spec:
         volumeMounts:
         - name: tmp
           mountPath: "/tmp"
+      - name: db-seed
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+        volumeMounts:
+        - name: tmp
+          mountPath: "/tmp"
       containers:
       - name: api
         securityContext:
@@ -71,6 +81,16 @@ spec:
         volumeMounts:
         - name: tmp
           mountPath: "/tmp"
+      - name: db-seed
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+        volumeMounts:
+        - name: tmp
+          mountPath: "/tmp"
       containers:
       - name: api
         securityContext: