From 71130295bf0df0a289e7aeadf24c19581b7d319f Mon Sep 17 00:00:00 2001
From: zyue110026 <98426905+zyue110026@users.noreply.github.com>
Date: Wed, 9 Jul 2025 16:07:41 -0500
Subject: [PATCH] Update db-deployment.yaml

---
 k8s-specifications/db-deployment.yaml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/k8s-specifications/db-deployment.yaml b/k8s-specifications/db-deployment.yaml
index bc94ca7368..0bbc80087b 100644
--- a/k8s-specifications/db-deployment.yaml
+++ b/k8s-specifications/db-deployment.yaml
@@ -28,6 +28,17 @@ spec:
         volumeMounts:
         - mountPath: /var/lib/postgresql/data
           name: db-data
+        resources:
+          requests:
+            memory: "256Mi"
+            cpu: "250m"
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+        securityContext:
+          runAsUser: 1000
+          runAsNonRoot: true
+          readOnlyRootFilesystem: true
       volumes:
       - name: db-data
         emptyDir: {}