diff --git a/services/hermes/node-ssh-access.yaml b/services/hermes/node-ssh-access.yaml
index 0d834165..6b2473de 100644
--- a/services/hermes/node-ssh-access.yaml
+++ b/services/hermes/node-ssh-access.yaml
@@ -32,6 +32,10 @@ spec:
           {{- end }}
         vault.hashicorp.com/agent-pre-populate-only: "true"
         vault.hashicorp.com/agent-init-first: "true"
+        vault.hashicorp.com/agent-requests-cpu: 5m
+        vault.hashicorp.com/agent-requests-mem: 16Mi
+        vault.hashicorp.com/agent-limits-cpu: 50m
+        vault.hashicorp.com/agent-limits-mem: 64Mi
     spec:
       serviceAccountName: hermes-node-ssh-access
       automountServiceAccountToken: true
diff --git a/testing/tests/test_hermes_cli_lanes.py b/testing/tests/test_hermes_cli_lanes.py
index 8188ccad..592030e6 100644
--- a/testing/tests/test_hermes_cli_lanes.py
+++ b/testing/tests/test_hermes_cli_lanes.py
@@ -973,6 +973,8 @@ def test_owner_agent_has_pinned_dedicated_node_ssh_access():
     assert pod_annotations[
         "vault.hashicorp.com/agent-inject-secret-node-ssh-public-key"
     ] == "kv/data/atlas/hermes/developer-ssh"
+    assert pod_annotations["vault.hashicorp.com/agent-requests-cpu"] == "5m"
+    assert pod_annotations["vault.hashicorp.com/agent-requests-mem"] == "16Mi"
     host_home = next(item for item in pod["volumes"] if item["name"] == "host-home")
     assert host_home["hostPath"] == {"path": "/home", "type": "Directory"}
     reconciler = pod["containers"][0]["args"][0]