diff --git a/k8s/nemoclaw-k8s.yaml b/k8s/nemoclaw-k8s.yaml
index edc8748cf..20a25c917 100644
--- a/k8s/nemoclaw-k8s.yaml
+++ b/k8s/nemoclaw-k8s.yaml
@@ -30,8 +30,11 @@ spec:
         requests:
           memory: "8Gi"
           cpu: "2"
-
-    # Workspace - runs official NemoClaw installer
+          ephemeral-storage: "20Gi"
+        limits:
+          memory: "16Gi"
+          cpu: "4"
+          ephemeral-storage: "40Gi"
     - name: workspace
       image: node:22
       command:
@@ -98,6 +101,11 @@ spec:
         requests:
           memory: "4Gi"
           cpu: "2"
+          ephemeral-storage: "4Gi"
+        limits:
+          memory: "8Gi"
+          cpu: "4"
+          ephemeral-storage: "8Gi"
 
   initContainers:
     # Configure Docker daemon for cgroup v2
@@ -107,10 +115,18 @@ spec:
       volumeMounts:
         - name: docker-config
           mountPath: /etc/docker
+      resources:
+        requests:
+          memory: "32Mi"
+          cpu: "100m"
+        limits:
+          memory: "64Mi"
+          cpu: "200m"
 
   volumes:
     - name: docker-storage
-      emptyDir: {}
+      emptyDir:
+        sizeLimit: "40Gi"
     - name: docker-socket
       emptyDir: {}
     - name: docker-config