diff --git a/k8s-ng/core/secret-stores/bitwarden-cli.yaml b/k8s-ng/core/secret-stores/bitwarden-cli.yaml
index 7194ad3..6b679de 100644
--- a/k8s-ng/core/secret-stores/bitwarden-cli.yaml
+++ b/k8s-ng/core/secret-stores/bitwarden-cli.yaml
@@ -40,7 +40,9 @@ spec:
               cpu: "300m"
             limits:
               memory: "512Mi"
-              cpu: "1000m"
+              # `bw sync` is bursty and was reaching the 1-core CFS quota.
+              # Keep the scheduler reservation modest, but allow short sync bursts.
+              cpu: "2"
           env:
             - name: BW_HOST
               valueFrom: