diff --git a/charts/coco-supported/kbs-access-sealed/templates/deployment.yaml b/charts/coco-supported/kbs-access-sealed/templates/deployment.yaml
index ce5b3271..ad2503fc 100644
--- a/charts/coco-supported/kbs-access-sealed/templates/deployment.yaml
+++ b/charts/coco-supported/kbs-access-sealed/templates/deployment.yaml
@@ -19,7 +19,7 @@ spec:
       labels:
         app: kbs-access-sealed
       annotations:
-        coco.io/initdata-configmap: initdata
+        coco.io/initdata-configmap: debug-initdata
     spec:
       runtimeClassName: {{ .Values.global.coco.runtimeClassName }}
       containers:
@@ -48,5 +48,5 @@ spec:
           secretName: kbs-sealed-secret
       - name: initdata
         configMap:
-          name: initdata
+          name: debug-initdata
           optional: false
diff --git a/values-azure.yaml b/values-azure.yaml
index bd1cf310..ca15b9fd 100644
--- a/values-azure.yaml
+++ b/values-azure.yaml
@@ -119,14 +119,6 @@ clusterGroup:
       syncPolicy:
         automated:
           prune: true
-      overrides:
-        # Use the unauthenticated registry.access.redhat.com mirror instead of
-        # registry.redhat.io on Azure -- peer-pods (kata-remote) CVMs pull
-        # images via guest-pull and registry.redhat.io requires credentials
-        # that are non-trivial to thread through that path. Same digest,
-        # same content, just served from a registry that doesn't require auth.
-        - name: image
-          value: "registry.access.redhat.com/ubi9/httpd-24@sha256:68a91ff691092f455fea682330c499588747231c16516cd4f35aff821e6847f2"
 
     kbs-access-curl:
       name: kbs-access-curl
@@ -136,10 +128,6 @@ clusterGroup:
       syncPolicy:
         automated:
           prune: true
-      overrides:
-        # See hello-openshift override above for rationale.
-        - name: image
-          value: "registry.access.redhat.com/ubi9/httpd-24@sha256:68a91ff691092f455fea682330c499588747231c16516cd4f35aff821e6847f2"
 
     kbs-access-sealed:
       name: kbs-access-sealed
@@ -149,10 +137,6 @@ clusterGroup:
       syncPolicy:
         automated:
           prune: true
-      overrides:
-        # See hello-openshift override above for rationale.
-        - name: image
-          value: "registry.access.redhat.com/ubi9/httpd-24@sha256:68a91ff691092f455fea682330c499588747231c16516cd4f35aff821e6847f2"
 
     kyverno:
       name: kyverno