REFACTOR(repo): remove control-plane scheduling

- Remove nodeSelector for control-plane node
- Remove tolerations for control-plane taint
- Allow pods to schedule on any available node

authelia/helm-values.yaml

@@ -8,10 +8,6 @@ ingress:
 # Pod configuration
 pod:
   kind: DaemonSet
-  tolerations:
-    - key: node-role.kubernetes.io/control-plane
-      operator: Exists
-      effect: NoSchedule
   resources:
     requests:
       cpu: 15m

falco/helm-values.yaml

@@ -174,14 +174,6 @@ serviceAccount:
   create: true
   name: falco
 
-# Node selector to run on all nodes
-nodeSelector: {}
-
-# Tolerations to run on all nodes including control-plane
-tolerations:
-  - effect: NoSchedule
-    key: node-role.kubernetes.io/control-plane
-
 # Run as DaemonSet on all nodes
 daemonset:
   updateStrategy:

vault/helm-values.yaml

@@ -72,12 +72,6 @@ server:
     type: ClusterIP
     port: 8200
 
-  # Tolerations for control-plane node (keep for 3-replica HA)
-  tolerations:
-    - key: "node-role.kubernetes.io/control-plane"
-      operator: "Exists"
-      effect: "NoSchedule"
-
   # High priority for critical secrets management
   priorityClassName: high-priority