diff --git a/k8s/database.deployment.yaml b/k8s/database.deployment.yaml
index 55b517ba..4aba348d 100644
--- a/k8s/database.deployment.yaml
+++ b/k8s/database.deployment.yaml
@@ -16,6 +16,7 @@ spec:
         linkerd.io/inject: enabled
         # Have to disable outbound ports since it's outside of cluster: https://linkerd.io/2.11/reference/proxy-configuration/
         config.linkerd.io/skip-outbound-ports: "3306"
+        proxy.istio.io/config: '{ "holdApplicationUntilProxyStarts": true }'
       labels:
         app: database
         name: database
diff --git a/k8s/email.deployment.yaml b/k8s/email.deployment.yaml
index ec35fb11..da1100c4 100644
--- a/k8s/email.deployment.yaml
+++ b/k8s/email.deployment.yaml
@@ -14,6 +14,7 @@ spec:
     metadata:
       annotations:
         linkerd.io/inject: enabled
+        proxy.istio.io/config: '{ "holdApplicationUntilProxyStarts": true }'
       labels:
         app: email 
         name: email 
diff --git a/k8s/encryption.deployment.yaml b/k8s/encryption.deployment.yaml
index 9b86322f..0afae52f 100644
--- a/k8s/encryption.deployment.yaml
+++ b/k8s/encryption.deployment.yaml
@@ -14,6 +14,7 @@ spec:
     metadata:
       annotations:
         linkerd.io/inject: enabled
+        proxy.istio.io/config: '{ "holdApplicationUntilProxyStarts": true }'
       labels:
         app: encryption
         name: encryption
diff --git a/k8s/password-exchange.deployment.yaml b/k8s/password-exchange.deployment.yaml
index 39b17493..212dd2d8 100644
--- a/k8s/password-exchange.deployment.yaml
+++ b/k8s/password-exchange.deployment.yaml
@@ -14,6 +14,7 @@ spec:
     metadata:
       annotations:
         linkerd.io/inject: enabled
+        proxy.istio.io/config: '{ "holdApplicationUntilProxyStarts": true }'
       labels:
         app: passwordexchange
         name: passwordexchange