diff --git a/virtcontainers/kata_agent.go b/virtcontainers/kata_agent.go
index 8d734cbc73..d950758dac 100644
--- a/virtcontainers/kata_agent.go
+++ b/virtcontainers/kata_agent.go
@@ -588,6 +588,8 @@ func constraintGRPCSpec(grpcSpec *grpc.Spec) {
 	grpcSpec.Linux.Resources.BlockIO = nil
 	grpcSpec.Linux.Resources.HugepageLimits = nil
 	grpcSpec.Linux.Resources.Network = nil
+	grpcSpec.Linux.Resources.CPU.Cpus = ""
+	grpcSpec.Linux.Resources.CPU.Mems = ""
 
 	// Disable network namespace since it is already handled on the host by
 	// virtcontainers. The network is a complex part which cannot be simply