diff --git a/helm-overrides/k8s-admin-prd-ase1/prometheus/custom-values.yaml b/helm-overrides/k8s-admin-prd-ase1/prometheus/custom-values.yaml
index cfaca6f..9d06397 100644
--- a/helm-overrides/k8s-admin-prd-ase1/prometheus/custom-values.yaml
+++ b/helm-overrides/k8s-admin-prd-ase1/prometheus/custom-values.yaml
@@ -1,18 +1,35 @@
 prometheus:
-  # Server only. alertmanager/kube-state-metrics/node-exporter/pushgateway
-  # are all enabled by default in this chart — none were asked for, and
-  # none are needed for what actually consumes this: toolshed's per-app
-  # CPU/memory come straight from kubelet's own cAdvisor endpoint (the
+  # alertmanager/kube-state-metrics/node-exporter/pushgateway are all
+  # enabled by default in this chart. None of the four are needed for
+  # what actually consumes this deployment — toolshed's per-app CPU/memory
+  # come straight from kubelet's own cAdvisor endpoint (the
   # kubernetes-nodes-cadvisor scrape job below, built into the server
-  # itself), not from any of these four. Each is its own pod on an 8GB
-  # node that was already at its ceiling before this — see claude.md's
-  # resource budget table.
+  # itself) — but node-exporter earns its keep separately: this box is an
+  # 8GB single node already near its ceiling, and node-exporter is the one
+  # thing here that would actually say so (host disk/memory/load, not
+  # per-container usage cAdvisor already covers). One DaemonSet pod on one
+  # node, hostNetwork rather than a Service — light enough to justify on
+  # its own.
+  #
+  # alertmanager/kube-state-metrics/pushgateway stay off: nothing here
+  # defines alerting rules to route (alertmanager), nothing needs
+  # deployment/rollout-status metrics yet as opposed to raw resource usage
+  # (kube-state-metrics), and nothing is a short-lived batch job pushing
+  # its own metrics (pushgateway). Each is a real pod this node has no
+  # spare room for — turn one on when something concrete needs it, not
+  # preemptively.
   alertmanager:
     enabled: false
   kube-state-metrics:
     enabled: false
   prometheus-node-exporter:
-    enabled: false
+    enabled: true
+    resources:
+      requests:
+        cpu: 20m
+        memory: 32Mi
+      limits:
+        memory: 64Mi
   prometheus-pushgateway:
     enabled: false