diff --git a/internal/controller/kubecertagent/kubecertagent.go b/internal/controller/kubecertagent/kubecertagent.go
index d3bf9a7e..61fba4e7 100644
--- a/internal/controller/kubecertagent/kubecertagent.go
+++ b/internal/controller/kubecertagent/kubecertagent.go
@@ -548,7 +548,8 @@ func (c *agentController) newAgentDeployment(controllerManagerPod *corev1.Pod) *
 								},
 								Requests: corev1.ResourceList{
 									corev1.ResourceMemory: resource.MustParse("32Mi"),
-									corev1.ResourceCPU:    resource.MustParse("20m"),
+									// Must be explicitly 0 (not unset) to avoid problem described in https://github.com/vmware-tanzu/pinniped/issues/1507.
+									corev1.ResourceCPU: resource.MustParse("0"),
 								},
 							},
 						},
diff --git a/internal/controller/kubecertagent/kubecertagent_test.go b/internal/controller/kubecertagent/kubecertagent_test.go
index a2aa4971..66250c46 100644
--- a/internal/controller/kubecertagent/kubecertagent_test.go
+++ b/internal/controller/kubecertagent/kubecertagent_test.go
@@ -127,7 +127,7 @@ func TestAgentController(t *testing.T) {
 							},
 							Requests: corev1.ResourceList{
 								corev1.ResourceMemory: resource.MustParse("32Mi"),
-								corev1.ResourceCPU:    resource.MustParse("20m"),
+								corev1.ResourceCPU:    resource.MustParse("0"),
 							},
 						},
 						ImagePullPolicy: corev1.PullIfNotPresent,