--- charts-original/values.yaml
+++ charts/values.yaml
@@ -1,8 +1,25 @@
 imagePullSecrets: {}
 
 installation:
+  controlPlaneTolerations:
+  - key: "node-role.kubernetes.io/control-plane"
+    operator: "Exists"
+    effect: "NoSchedule"
+  - key: "node-role.kubernetes.io/etcd"
+    operator: "Exists"
+    effect: "NoExecute"
   enabled: true
   kubernetesProvider: ""
+  calicoNetwork:
+    bgp: Disabled
+    ipPools:
+    - natOutgoing: Enabled
+      encapsulation: VXLAN
+      cidr: 10.42.0.0/16
+      blockSize: 24
+  imagePath: "rancher"
+  imagePrefix: "mirrored-calico-"
+  flexVolumePath: "/var/lib/kubelet/volumeplugins/"
 
 apiServer:
   enabled: true
@@ -20,9 +37,24 @@
 
 # Configuration for the tigera operator
 tigeraOperator:
-  image: tigera/operator
+  image: rancher/mirrored-calico-operator
   version: v1.23.7
-  registry: quay.io
+  registry: docker.io
 calicoctl:
-  image: docker.io/calico/ctl
+  image: rancher/mirrored-calico-ctl
   tag: v3.21.5
+
+global:
+  systemDefaultRegistry: ""
+  clusterCIDRv4: ""
+  clusterCIDRv6: ""
+
+# Config required by Windows nodes
+ipamConfig:
+  strictAffinity: true
+  autoAllocateBlocks: true
+
+felixConfiguration:
+  wireguardEnabled: false
+  # Config required to fix RKE2 issue #1541
+  featureDetectOverride: "ChecksumOffloadBroken=true"