--- charts-original/values.yaml
+++ charts/values.yaml
@@ -1,23 +1,57 @@
 operator:
   tolerations:
-    - key: "node-role.kubernetes.io/master"
-      operator: "Exists"
-      effect: "NoSchedule"
+  - effect: NoSchedule
+    key: node-role.kubernetes.io/control-plane
+    operator: Exists
+  - effect: NoSchedule
+    key: node-role.kubernetes.io/etcd
+    operator: Exists
+  - effect: NoSchedule
+    key: cattle.io/os
+    operator: Equal
+    value: linux
   nodeSelector:
-    node-role.kubernetes.io/master: ""
+    node-role.kubernetes.io/control-plane: "true"
   nameOverride: ""
   fullnameOverride: ""
-  resourcePrefix: "openshift.io"
+  resourcePrefix: "rancher.io"
   enableAdmissionController: false
   cniBinPath: "/opt/cni/bin"
   clusterType: "kubernetes"
 
 # Image URIs for sriov-network-operator components
 images:
-  operator: quay.io/openshift/origin-sriov-network-operator
-  sriovConfigDaemon: quay.io/openshift/origin-sriov-network-config-daemon
-  sriovCni: quay.io/openshift/origin-sriov-cni
-  ibSriovCni: quay.io/openshift/origin-sriov-infiniband-cni
-  sriovDevicePlugin: quay.io/openshift/origin-sriov-network-device-plugin
-  resourcesInjector: quay.io/openshift/origin-sriov-dp-admission-controller
-  webhook: quay.io/openshift/origin-sriov-network-webhook
+  operator:
+    image: rancher/hardened-sriov-network-operator
+    tag: v1.0.0-build20210429
+  sriovConfigDaemon:
+    image: rancher/hardened-sriov-network-config-daemon
+    tag: v1.0.0-build20210429
+  sriovCni:
+    image: rancher/hardened-sriov-cni
+    tag: v2.6-build20210310
+  ibSriovCni: 
+    image: rancher/hardened-ib-sriov-cni
+    tag: v1.0.0-build20210310
+  sriovDevicePlugin: 
+    image: rancher/hardened-sriov-network-device-plugin
+    tag: v3.3.1-build20210310
+  resourcesInjector: 
+    image: rancher/hardened-sriov-network-resources-injector
+    tag: v1-build20210310
+  webhook:
+    image: rancher/hardened-sriov-network-webhook
+    tag: v1.0.0-build20210429
+
+# cert_manager enables integration with cert-manager to generate
+# certificates for the operator webhooks. Otherwise the chart will
+# generate ad-hoc certificates with no automated renewal at expiration,
+# not recommended for production clusters.
+cert_manager: false
+
+global:
+  cattle:
+    systemDefaultRegistry: ""
+  rbac:
+    userRoles:
+      aggregateToDefaultRoles: false