diff --git a/functions/render/200-helm-release-zitadel.yaml.gotmpl b/functions/render/200-helm-release-zitadel.yaml.gotmpl
index a1af4ad..a255022 100644
--- a/functions/render/200-helm-release-zitadel.yaml.gotmpl
+++ b/functions/render/200-helm-release-zitadel.yaml.gotmpl
@@ -160,6 +160,18 @@
   "configmapConfig" $cmCfg
 }}
 
+# Default app resources come from live Goldilocks recommendations. The chart
+# uses top-level `resources` for the main ZITADEL Deployment and
+# `login.resources` for the Login UI Deployment.
+{{- $zitadelResources := dict
+  "requests" (dict "cpu" "23m" "memory" "156Mi")
+  "limits" (dict "cpu" "200m" "memory" "384Mi")
+}}
+{{- $loginResources := dict
+  "requests" (dict "cpu" "15m" "memory" "105Mi")
+  "limits" (dict "cpu" "500m" "memory" "512Mi")
+}}
+
 # Masterkey wiring — secretRef sets masterkeySecretName, inline sets masterkey directly.
 {{- if eq $mk.mode "secretRef" }}
   {{- $zitadel = set $zitadel "masterkeySecretName" $mk.secretName }}
@@ -173,6 +185,8 @@
 # the main Deployment.
 {{- $chartDefaults := dict
   "zitadel" $zitadel
+  "resources" $zitadelResources
+  "login" (dict "resources" $loginResources)
   "env" $dbEnv
 }}
 
diff --git a/tests/test-render/main.k b/tests/test-render/main.k
index 7e7f8ea..0425b7e 100644
--- a/tests/test-render/main.k
+++ b/tests/test-render/main.k
@@ -37,7 +37,17 @@ _items = [
                     apiVersion = "helm.m.crossplane.io/v1beta1"
                     kind = "Release"
                     metadata.name = "mk-secret-zitadel"
-                    spec.forProvider.values.zitadel.masterkeySecretName = "zitadel-masterkey"
+                    spec.forProvider.values = {
+                        zitadel.masterkeySecretName = "zitadel-masterkey"
+                        resources = {
+                            requests = {cpu = "23m", memory = "156Mi"}
+                            limits = {cpu = "200m", memory = "384Mi"}
+                        }
+                        login.resources = {
+                            requests = {cpu = "15m", memory = "105Mi"}
+                            limits = {cpu = "500m", memory = "512Mi"}
+                        }
+                    }
                 }
             ]
         }