Merge release/v2.6.7 to main

Makefile

@@ -119,8 +119,6 @@ build-installer: manifests generate kustomize ## Generate a consolidated YAML wi
 	mkdir -p dist
 	cd config/manager && $(KUSTOMIZE) edit set image controller=${IMG}
 	$(KUSTOMIZE) build config/default > dist/install.yaml
-	printf '\n---\n' >> dist/install.yaml
-	$(KUSTOMIZE) build config/admission >> dist/install.yaml
 
 ##@ Deployment
 
@@ -140,11 +138,9 @@ uninstall: manifests kustomize ## Uninstall CRDs from the K8s cluster specified
 deploy: manifests kustomize ## Deploy controller to the K8s cluster specified in ~/.kube/config.
 	cd config/manager && $(KUSTOMIZE) edit set image controller=${IMG}
 	$(KUSTOMIZE) build config/default | $(KUBECTL) apply -f -
-	$(KUSTOMIZE) build config/admission | $(KUBECTL) apply -f -
 
 .PHONY: undeploy
 undeploy: kustomize ## Undeploy controller from the K8s cluster specified in ~/.kube/config. Call with ignore-not-found=true to ignore resource not found errors during deletion.
-	$(KUSTOMIZE) build config/admission | $(KUBECTL) delete --ignore-not-found=$(ignore-not-found) -f -
 	$(KUSTOMIZE) build config/default | $(KUBECTL) delete --ignore-not-found=$(ignore-not-found) -f -
 
 .PHONY: helm-generate

deploy/parameter/helm-values.yaml

@@ -22,15 +22,6 @@ workloadIdentity:
   enabled: true
   globalServiceAccountEnabled: false
 
-# On Kubernetes 1.30 or later, the default actions deny unauthorized
-# ServiceAccount references and record the denial in the Kubernetes audit log.
-# The policy is not installed on earlier Kubernetes versions.
-serviceAccountAuthorization:
-  enabled: true
-  validationActions:
-  - Deny
-  - Audit
-
 serviceAccount:
   # Specifies whether a service account should be created
   create: true