Chart defaults set requests == limits == 500m for both. The node is at 95% of allocatable CPU in requests while actually using about 10%, so lapi sat Pending with Insufficient cpu. Requests dropped to 50m/100m with the limits left generous, since appsec runs inline on every public request.