diff --git a/everyrow-mcp/deploy/chart/templates/deployment.yaml b/everyrow-mcp/deploy/chart/templates/deployment.yaml
index 295abb84..caf0fc60 100644
--- a/everyrow-mcp/deploy/chart/templates/deployment.yaml
+++ b/everyrow-mcp/deploy/chart/templates/deployment.yaml
@@ -42,22 +42,29 @@ spec:
               type: RuntimeDefault
           ports:
             - containerPort: 8000
+          startupProbe:
+            httpGet:
+              path: /health
+              port: 8000
+            periodSeconds: 5
+            timeoutSeconds: 10
+            failureThreshold: 12
           readinessProbe:
             httpGet:
               path: /health
               port: 8000
             initialDelaySeconds: 5
             periodSeconds: 10
-            timeoutSeconds: 5
+            timeoutSeconds: 10
             failureThreshold: 3
           livenessProbe:
             httpGet:
               path: /health
               port: 8000
-            initialDelaySeconds: 10
+            initialDelaySeconds: 30
             periodSeconds: 30
-            timeoutSeconds: 5
-            failureThreshold: 3
+            timeoutSeconds: 10
+            failureThreshold: 5
           env:
             {{- range $key, $value := .Values.env }}
             - name: {{ $key }}
diff --git a/everyrow-mcp/deploy/chart/values.yaml b/everyrow-mcp/deploy/chart/values.yaml
index d84ef0cb..ef492734 100644
--- a/everyrow-mcp/deploy/chart/values.yaml
+++ b/everyrow-mcp/deploy/chart/values.yaml
@@ -49,7 +49,7 @@ secrets:
 # List every Sentinel + master IP here. Use "kubectl get endpoints" or
 # check REDIS_SENTINEL_ENDPOINTS to find the IPs, then narrow the CIDRs.
 networkPolicy:
-  enabled: true
+  enabled: false
   gatewayNamespace: gke-managed-system
   redisPort: 6379
   redisSentinelPort: 26379