diff --git a/config/500-controller.yaml b/config/500-controller.yaml
index 3cc82cb672c..f1466e1a55a 100644
--- a/config/500-controller.yaml
+++ b/config/500-controller.yaml
@@ -52,6 +52,9 @@ spec:
         ports:
           - containerPort: 9090
             name: metrics
+        resources:
+          limits:
+            memory: 1000Mi  # An initial guess, but consistent with serving
         volumeMounts:
           - name: config-logging
             mountPath: /etc/config-logging
diff --git a/config/500-webhook.yaml b/config/500-webhook.yaml
index bdfac3af651..c1aa0acc376 100644
--- a/config/500-webhook.yaml
+++ b/config/500-webhook.yaml
@@ -46,6 +46,9 @@ spec:
               fieldPath: metadata.namespace
         - name: CONFIG_LOGGING_NAME
           value: config-logging
+        resources:
+          limits:
+            memory: 1000Mi   # An initial guess, but consistent with serving
       volumes:
         - name: config-logging
           configMap: