diff --git a/devops/gcp/deploy/templates/deployment-bootstrap.yaml b/devops/gcp/deploy/templates/deployment-bootstrap.yaml
index 464f3ecc8a1011bf319144f983b0c9608ae63551..6d15b11def7cb93db5f33d7be214a08a2e7ed7ac 100644
--- a/devops/gcp/deploy/templates/deployment-bootstrap.yaml
+++ b/devops/gcp/deploy/templates/deployment-bootstrap.yaml
@@ -16,6 +16,10 @@ spec:
         app: "{{ .Values.conf.appName }}-bootstrap"
       annotations:
         rollme: {{ randAlphaNum 5 | quote }}
+        sidecar.istio.io/proxyCPU: {{ .Values.istio.bootstrapProxyCPU | quote }}
+        sidecar.istio.io/proxyMemory: {{ .Values.istio.proxyMemory | quote }}
+        sidecar.istio.io/proxyCPULimit: {{ .Values.istio.bootstrapProxyCPULimit | quote }}
+        sidecar.istio.io/proxyMemoryLimit: {{ .Values.istio.proxyMemoryLimit | quote }}
     spec:
       containers:
         - name: "{{ .Values.conf.appName }}-bootstrap"
diff --git a/devops/gcp/deploy/templates/deployment.yaml b/devops/gcp/deploy/templates/deployment.yaml
index 0ab7d3cd5956af9803f4b434986799cb0163dcff..f02da18134282a229cfd35a92e3e52012c328be6 100644
--- a/devops/gcp/deploy/templates/deployment.yaml
+++ b/devops/gcp/deploy/templates/deployment.yaml
@@ -16,6 +16,10 @@ spec:
         app: "{{ .Values.conf.appName }}"
       annotations:
         rollme: {{ randAlphaNum 5 | quote }}
+        sidecar.istio.io/proxyCPU: {{ .Values.istio.proxyCPU | quote }}
+        sidecar.istio.io/proxyMemory: {{ .Values.istio.proxyMemory | quote }}
+        sidecar.istio.io/proxyCPULimit: {{ .Values.istio.proxyCPULimit | quote }}
+        sidecar.istio.io/proxyMemoryLimit: {{ .Values.istio.proxyMemoryLimit | quote }}
     spec:
       containers:
         - name: "{{ .Values.conf.appName }}"
diff --git a/devops/gcp/deploy/values.yaml b/devops/gcp/deploy/values.yaml
index 17e8f9b0e9f009f77381b163fb228dad745dd5fb..c4b4416c458f6b2ca99b4554d34593b1c4b5435c 100644
--- a/devops/gcp/deploy/values.yaml
+++ b/devops/gcp/deploy/values.yaml
@@ -16,3 +16,11 @@ conf:
   minioSecretName: "policy-minio-secret"
   bootstrapSecretName: "minio-bootstrap-secret"
   onPremEnabled: false
+
+istio:
+  proxyCPU: "50m"
+  proxyCPULimit: "500m"
+  proxyMemory: "64Mi"
+  proxyMemoryLimit: "512Mi"
+  bootstrapProxyCPU: "10m"
+  bootstrapProxyCPULimit: "100m"
diff --git a/devops/gcp/opa/templates/deployment.yaml b/devops/gcp/opa/templates/deployment.yaml
index bbc00b540f4ba06b784ae2099e2c20a74953aafd..31cb34f7c9603d546a4ca3d4289562e45e051910 100644
--- a/devops/gcp/opa/templates/deployment.yaml
+++ b/devops/gcp/opa/templates/deployment.yaml
@@ -16,6 +16,12 @@ spec:
     metadata:
       labels:
         app: "{{ .Values.conf.appName }}"
+      annotations:
+        rollme: {{ randAlphaNum 5 | quote }}
+        sidecar.istio.io/proxyCPU: {{ .Values.istio.proxyCPU | quote }}
+        sidecar.istio.io/proxyMemory: {{ .Values.istio.proxyMemory | quote }}
+        sidecar.istio.io/proxyCPULimit: {{ .Values.istio.proxyCPULimit | quote }}
+        sidecar.istio.io/proxyMemoryLimit: {{ .Values.istio.proxyMemoryLimit | quote }}
       name: "{{ .Values.conf.appName }}"
     spec:
       containers:
diff --git a/devops/gcp/opa/values.yaml b/devops/gcp/opa/values.yaml
index 644a226c35dc2dabf8cbbac07e5f1ff17f6db065..e17bf7943037a264ea1f95d0fcf453c985c85c57 100644
--- a/devops/gcp/opa/values.yaml
+++ b/devops/gcp/opa/values.yaml
@@ -18,3 +18,9 @@ conf:
   domain: ""
   minioSecretName: "policy-minio-secret"
   onPremEnabled: false
+
+istio:
+  proxyCPU: "50m"
+  proxyCPULimit: "500m"
+  proxyMemory: "64Mi"
+  proxyMemoryLimit: "512Mi"