diff --git a/upstream/patch.yaml b/upstream/patch.yaml
--- a/upstream/patch.yaml
+++ b/upstream/patch.yaml
@@ -10,6 +10,11 @@ spec:
       containers:
         - name: pomerium
           image: pomerium/ingress-controller:sha-dd49d67
+          resources:
+            limits:
+              cpu: 5000m
+              # getting OOM at the default 1Gi
+              memory: 5Gi
 ---
 apiVersion: v1
 kind: Service