diff --git a/config/500-controller.yaml b/config/500-controller.yaml
index 515485781f..8d8aaacc9d 100644
--- a/config/500-controller.yaml
+++ b/config/500-controller.yaml
@@ -29,7 +29,6 @@ spec:
   template:
     metadata:
       annotations:
-        cluster-autoscaler.kubernetes.io/safe-to-evict: "true"
         # This must be outside of the mesh to probe the gateways.
         # NOTE: this is allowed here and not elsewhere because
         # this is the Istio controller, and so it may be Istio-aware.
diff --git a/config/500-webhook-deployment.yaml b/config/500-webhook-deployment.yaml
index 142dc327fc..6ad2ff57d8 100644
--- a/config/500-webhook-deployment.yaml
+++ b/config/500-webhook-deployment.yaml
@@ -29,8 +29,6 @@ spec:
       role: net-istio-webhook
   template:
     metadata:
-      annotations:
-        cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
       labels:
         app: net-istio-webhook
         role: net-istio-webhook