diff --git a/stacks/dbaas/modules/dbaas/main.tf b/stacks/dbaas/modules/dbaas/main.tf
index 0a479e86..db32415c 100644
--- a/stacks/dbaas/modules/dbaas/main.tf
+++ b/stacks/dbaas/modules/dbaas/main.tf
@@ -111,7 +111,7 @@ resource "kubernetes_config_map" "mysql_standalone_cnf" {
       innodb_io_capacity=100
       innodb_io_capacity_max=200
       innodb_redo_log_capacity=1073741824
-      innodb_buffer_pool_size=1073741824
+      innodb_buffer_pool_size=2147483648
       innodb_flush_neighbors=1
       innodb_lru_scan_depth=256
       innodb_page_cleaners=1
@@ -228,11 +228,13 @@ resource "kubernetes_stateful_set_v1" "mysql_standalone" {
           resources {
             requests = {
               cpu    = "250m"
-              memory = "3Gi"
-            }
-            limits = {
               memory = "4Gi"
             }
+            # 6Gi (was 4Gi) — code-oflt 2026-06-30: headroom for the 2Gi InnoDB
+            # buffer pool (was 1Gi); the pod was already at ~3.7Gi/4Gi (near OOM).
+            limits = {
+              memory = "6Gi"
+            }
           }
 
           volume_mount {
@@ -298,7 +300,15 @@ resource "kubernetes_stateful_set_v1" "mysql_standalone" {
   }
 
   lifecycle {
-    ignore_changes = [spec[0].template[0].spec[0].dns_config] # KYVERNO_LIFECYCLE_V1
+    ignore_changes = [
+      spec[0].template[0].spec[0].dns_config, # KYVERNO_LIFECYCLE_V1
+      # StatefulSet volumeClaimTemplates are immutable post-creation, and the
+      # pvc-autoresizer rewrites their annotations on the live object
+      # (storage_limit/threshold), so TF's desired VCT can never apply and a
+      # broad `dbaas` apply errors out. The autoresizer owns PVC sizing; ignore
+      # the VCT so other STS changes (e.g. resources) apply cleanly. (code-oflt 2026-06-30)
+      spec[0].volume_claim_template,
+    ]
   }
 }