diff --git a/apis/installer/v1alpha1/zz_generated.deepcopy.go b/apis/installer/v1alpha1/zz_generated.deepcopy.go
index 3889a9e9..855f18ce 100644
--- a/apis/installer/v1alpha1/zz_generated.deepcopy.go
+++ b/apis/installer/v1alpha1/zz_generated.deepcopy.go
@@ -21,7 +21,7 @@ limitations under the License.
 package v1alpha1
 
 import (
-	"k8s.io/api/core/v1"
+	v1 "k8s.io/api/core/v1"
 	"k8s.io/apimachinery/pkg/runtime"
 )
 
diff --git a/charts/cluster-profile-manager/README.md b/charts/cluster-profile-manager/README.md
index 9c3b5c06..107ad24b 100644
--- a/charts/cluster-profile-manager/README.md
+++ b/charts/cluster-profile-manager/README.md
@@ -66,6 +66,7 @@ The following table lists the configurable parameters of the `cluster-profile-ma
 | image.proxies.quay                        | quay.io/company/bin:tag                                                            | <code>quay.io</code>                                                                                                                                                                            |
 | image.proxies.kubernetes                  | registry.k8s.io/bin:tag                                                            | <code>registry.k8s.io</code>                                                                                                                                                                    |
 | image.proxies.microsoft                   |                                                                                    | <code>mcr.microsoft.com</code>                                                                                                                                                                  |
+| image.proxies.oracle                      |                                                                                    | <code>container-registry.oracle.com</code>                                                                                                                                                      |
 | image.proxies.weaviate                    |                                                                                    | <code>cr.weaviate.io</code>                                                                                                                                                                     |
 | registry.credentials                      |                                                                                    | <code>{}</code>                                                                                                                                                                                 |
 | registry.certs                            | username: "abc" password: "xyz"                                                    | <code>{}</code>                                                                                                                                                                                 |
diff --git a/charts/cluster-profile-manager/values.openapiv3_schema.yaml b/charts/cluster-profile-manager/values.openapiv3_schema.yaml
index d33f5641..c067633f 100644
--- a/charts/cluster-profile-manager/values.openapiv3_schema.yaml
+++ b/charts/cluster-profile-manager/values.openapiv3_schema.yaml
@@ -70,6 +70,8 @@ properties:
             type: string
           microsoft:
             type: string
+          oracle:
+            type: string
           quay:
             type: string
           weaviate:
diff --git a/charts/cluster-profile-manager/values.yaml b/charts/cluster-profile-manager/values.yaml
index 11eb4861..3c1113f6 100644
--- a/charts/cluster-profile-manager/values.yaml
+++ b/charts/cluster-profile-manager/values.yaml
@@ -45,6 +45,7 @@ image:
     # registry.k8s.io/bin:tag
     kubernetes: registry.k8s.io
     microsoft: mcr.microsoft.com
+    oracle: container-registry.oracle.com
     weaviate: cr.weaviate.io
 
 # image:
diff --git a/charts/managed-serviceaccount-manager/README.md b/charts/managed-serviceaccount-manager/README.md
index e61ebd94..432fc35c 100644
--- a/charts/managed-serviceaccount-manager/README.md
+++ b/charts/managed-serviceaccount-manager/README.md
@@ -45,20 +45,20 @@ The command removes all the Kubernetes components associated with the chart and
 
 The following table lists the configurable parameters of the `managed-serviceaccount-manager` chart and their default values.
 
-|           Parameter            |                  Description                   |                                                                                            Default                                                                                             |
-|--------------------------------|------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| nameOverride                   |                                                | <code>""</code>                                                                                                                                                                                |
-| fullnameOverride               |                                                | <code>""</code>                                                                                                                                                                                |
-| image                          | Image of the managed service-account instances | <code>ghcr.io/kluster-manager/managed-serviceaccount</code>                                                                                                                                    |
-| tag                            |                                                | <code>""</code>                                                                                                                                                                                |
-| replicas                       | Number of replicas                             | <code>1</code>                                                                                                                                                                                 |
-| securityContext                |                                                | <code>{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}</code> |
-| featureGates.ephemeralIdentity |                                                | <code>false</code>                                                                                                                                                                             |
-| agentImagePullSecret           |                                                | <code>""</code>                                                                                                                                                                                |
-| kubeconfigSecretName           | required for multicluster controlplane         | <code>""</code>                                                                                                                                                                                |
-| addonManagerNamespace          |                                                | <code>open-cluster-management-managed-serviceaccount</code>                                                                                                                                    |
-| placement.create               |                                                | <code>true</code>                                                                                                                                                                              |
-| placement.name                 |                                                | <code>global</code>                                                                                                                                                                            |
+|           Parameter            |                  Description                   |                                                                                             Default                                                                                             |
+|--------------------------------|------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| nameOverride                   |                                                | <code>""</code>                                                                                                                                                                                 |
+| fullnameOverride               |                                                | <code>""</code>                                                                                                                                                                                 |
+| image                          | Image of the managed service-account instances | <code>ghcr.io/kluster-manager/managed-serviceaccount</code>                                                                                                                                     |
+| tag                            |                                                | <code>""</code>                                                                                                                                                                                 |
+| replicas                       | Number of replicas                             | <code>1</code>                                                                                                                                                                                  |
+| securityContext                |                                                | <code>{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsNonRoot":true,"seccompProfile":{"type":"RuntimeDefault"}}</code> |
+| featureGates.ephemeralIdentity |                                                | <code>false</code>                                                                                                                                                                              |
+| agentImagePullSecret           |                                                | <code>""</code>                                                                                                                                                                                 |
+| kubeconfigSecretName           | required for multicluster controlplane         | <code>""</code>                                                                                                                                                                                 |
+| addonManagerNamespace          |                                                | <code>open-cluster-management-managed-serviceaccount</code>                                                                                                                                     |
+| placement.create               |                                                | <code>true</code>                                                                                                                                                                               |
+| placement.name                 |                                                | <code>global</code>                                                                                                                                                                             |
 
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:
diff --git a/charts/managed-serviceaccount-manager/values.yaml b/charts/managed-serviceaccount-manager/values.yaml
index 3dbbdf1e..1c8a41c1 100644
--- a/charts/managed-serviceaccount-manager/values.yaml
+++ b/charts/managed-serviceaccount-manager/values.yaml
@@ -12,9 +12,9 @@ securityContext: # +doc-gen:break
   allowPrivilegeEscalation: false
   capabilities:
     drop: ["ALL"]
-  readOnlyRootFilesystem: true
+  privileged: false
   runAsNonRoot: true
-  runAsUser: 65534
+  readOnlyRootFilesystem: true
   seccompProfile:
     type: RuntimeDefault