diff --git a/README.md b/README.md
index 16c3ee9c..302dff36 100644
--- a/README.md
+++ b/README.md
@@ -54,6 +54,10 @@ kubectl apply -f "https://infra.tekton.dev/tekton-releases/pruner/previous/v$VER
 kubectl get pods -n tekton-pipelines -l app=tekton-pruner-controller
 ```
 
+**Resource Limits:**
+
+Default limits based on benchmark data: controller 2Gi memory (supports ~50k runs), webhook 512Mi. CPU limits omitted to avoid throttling. Memory scales linearly: `memory_mb = 23 + (13.6 × runs_in_thousands)`.
+
 ### Important: v0.3.2 Retraction
 
 **Version v0.3.2 has been retracted** from the Go module registry due to it being an unintended release. Users are recommended not to use v0.3.2.
@@ -169,4 +173,4 @@ data:
 
 ## License
 
-Apache License 2.0 - See [LICENSE](LICENSE) for details
\ No newline at end of file
+Apache License 2.0 - See [LICENSE](LICENSE) for details
diff --git a/config/controller.yaml b/config/controller.yaml
index 6a0c1c23..da74ccfc 100644
--- a/config/controller.yaml
+++ b/config/controller.yaml
@@ -73,6 +73,12 @@ spec:
           ports:
             - name: metrics
               containerPort: 9090
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              memory: 2Gi
           env:
             - name: SYSTEM_NAMESPACE
               valueFrom:
diff --git a/config/webhook.yaml b/config/webhook.yaml
index f97d339e..ea20f4b6 100644
--- a/config/webhook.yaml
+++ b/config/webhook.yaml
@@ -42,6 +42,12 @@ spec:
           # This is the Go import path for the binary that is containerized
           # and substituted here.
           image: ko://github.com/tektoncd/pruner/cmd/webhook
+          resources:
+            requests:
+              cpu: 50m
+              memory: 64Mi
+            limits:
+              memory: 512Mi
           env:
             - name: SYSTEM_NAMESPACE
               valueFrom: