diff --git a/.github/workflows/merge-main.yml b/.github/workflows/merge-main.yml
index b3ffa8d17..295a137a9 100644
--- a/.github/workflows/merge-main.yml
+++ b/.github/workflows/merge-main.yml
@@ -89,6 +89,8 @@ jobs:
               -p URL=fom.nrs.gov.bc.ca
               -p AWS_USER_POOLS_WEB_CLIENT_ID="4bu2n8at3m32a2fqnvd4t06la1"
               -p LOGOUT_CHAIN_URL="https://logon7.gov.bc.ca/clp-cgi/logoff.cgi?retnow=1&returl=https://loginproxy.gov.bc.ca/auth/realms/standard/protocol/openid-connect/logout?redirect_uri="
+              -p MEMORY_REQUEST=650Mi
+              -p MEMORY_LIMIT=2Gi
             post_rollout: oc create job "certbot-manual-$(date +%s)" --from=cronjob/certbot
           - name: admin
             file: admin/openshift.deploy.yml
diff --git a/api/openshift.deploy.yml b/api/openshift.deploy.yml
index eb58dfc21..1576cec35 100644
--- a/api/openshift.deploy.yml
+++ b/api/openshift.deploy.yml
@@ -42,6 +42,8 @@ parameters:
     value: 30m
   - name: MEMORY_REQUEST
     value: 150Mi
+  - name: MEMORY_LIMIT
+    value: 1Gi
   - name: REGISTRY
     description: Container registry to import from (internal is image-registry.openshift-image-registry.svc:5000)
     value: ghcr.io
@@ -230,6 +232,8 @@ objects:
                 - containerPort: ${{PORT}}
                   protocol: TCP
               resources:
+                limits:
+                  memory: ${MEMORY_LIMIT}
                 requests:
                   cpu: ${CPU_REQUEST}
                   memory: ${MEMORY_REQUEST}
@@ -312,7 +316,7 @@ objects:
       name: ${NAME}-${ZONE}-work-flow-state-change-batch
     spec:
       concurrencyPolicy: Replace
-      schedule: "${CRON_MINUTES} 9 * * * " # Run daily at 9:xx AM UTC
+      schedule: "${CRON_MINUTES} 8 * * * " # Run daily at 8:xx AM UTC
       jobTemplate:
         spec:
           template: