docs: update

Author: francesco-furlan

charts/shield/README.md

@@ -297,7 +297,7 @@ The following table lists the configurable parameters of the `shield` chart and
 | gke_autopilot.allowlist_version                                                                                                        | The Allowlist version label applied to host-shield workloads. Must match an AllowlistSynchronizer the cluster knows about. (Replaces the deprecated top-level "gke_autopilot_allowlist", which is still honored and takes precedence when set.)                                                                                                                                                                  | <code>sysdig-agent-v1.1.4</code>                                                                                                                                                                                                                                                                                                                                                                                                             |
 | gke_autopilot.allowlist_waiter.enabled                                                                                                 | Enable the waiter Job                                                                                                                                                                                                                                                                                                                                                                                            | <code>false</code>                                                                                                                                                                                                                                                                                                                                                                                                                           |
 | gke_autopilot.allowlist_waiter.timeout                                                                                                 | Maximum time the Job will block on the AllowlistSynchronizer reaching Ready                                                                                                                                                                                                                                                                                                                                      | <code>120s</code>                                                                                                                                                                                                                                                                                                                                                                                                                            |
-| gke_autopilot.allowlist_waiter.active_deadline_seconds                                                                                 | Maximum seconds the waiter Pod is allowed to run before Kubernetes terminates it. Job-level guard against pod hangs before the inner kubectl wait timeout fires (image-pull stalls, scheduler delays). Should be greater than `timeout` to leave headroom for pod startup.                                                                                                                                       | <code>300</code>                                                                                                                                                                                                                                                                                                                                                                                                                             |
+| gke_autopilot.allowlist_waiter.active_deadline_seconds                                                                                 | Maximum seconds the waiter Pod is allowed to run before Kubernetes terminates it. Acts as a Job-level guard against the pod hanging before the inner `kubectl wait` timeout fires (image-pull stalls, scheduler delays, admission webhook hangs). Should be greater than `timeout` to leave headroom for pod startup.                                                                                            | <code>300</code>                                                                                                                                                                                                                                                                                                                                                                                                                             |
 | gke_autopilot.allowlist_waiter.service_account_name                                                                                    | Override the name of the waiter ServiceAccount (defaults to <host fullname>-allowlist-waiter)                                                                                                                                                                                                                                                                                                                    | <code></code>                                                                                                                                                                                                                                                                                                                                                                                                                                |
 | gke_autopilot.allowlist_waiter.create_rbac                                                                                             | Create the RBAC resources (ServiceAccount, ClusterRole, ClusterRoleBinding) for the allowlist waiter Job. Set to false to manage them externally.                                                                                                                                                                                                                                                                | <code>true</code>                                                                                                                                                                                                                                                                                                                                                                                                                            |
 | gke_autopilot.allowlist_waiter.rbac_annotations                                                                                        | Additional annotations applied to the waiter SA/ClusterRole/ClusterRoleBinding                                                                                                                                                                                                                                                                                                                                   | <code>{}</code>                                                                                                                                                                                                                                                                                                                                                                                                                              |