fix: add resource limits

README.md

@@ -54,6 +54,10 @@ kubectl apply -f "https://infra.tekton.dev/tekton-releases/pruner/previous/v$VER
 kubectl get pods -n tekton-pipelines -l app=tekton-pruner-controller
 ```
 
+**Resource Limits:**
+
+Default limits based on benchmark data: controller 2Gi memory (supports ~50k runs), webhook 512Mi. CPU limits omitted to avoid throttling. Memory scales linearly: `memory_mb = 23 + (13.6 × runs_in_thousands)`.
+
 ### Important: v0.3.2 Retraction
 
 **Version v0.3.2 has been retracted** from the Go module registry due to it being an unintended release. Users are recommended not to use v0.3.2.
@@ -169,4 +173,4 @@ data:
 
 ## License
 
-Apache License 2.0 - See [LICENSE](LICENSE) for details
+Apache License 2.0 - See [LICENSE](LICENSE) for details

config/controller.yaml

@@ -73,6 +73,12 @@ spec:
           ports:
             - name: metrics
               containerPort: 9090
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              memory: 2Gi
           env:
             - name: SYSTEM_NAMESPACE
               valueFrom:

config/webhook.yaml

@@ -42,6 +42,12 @@ spec:
           # This is the Go import path for the binary that is containerized
           # and substituted here.
           image: ko://github.com/tektoncd/pruner/cmd/webhook
+          resources:
+            requests:
+              cpu: 50m
+              memory: 64Mi
+            limits:
+              memory: 512Mi
           env:
             - name: SYSTEM_NAMESPACE
               valueFrom: