diff --git a/charts/spire/charts/spire-server/README.md b/charts/spire/charts/spire-server/README.md
index a0860c4ff..6187f5268 100644
--- a/charts/spire/charts/spire-server/README.md
+++ b/charts/spire/charts/spire-server/README.md
@@ -239,7 +239,7 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
 | `controllerManager.identities.ttl`                               | Indicates an upper-bound time-to-live for X509 SVIDs. If unset, the cluster default will be chosen.                                                                                                                                                                                                                                                                  | `""`                                                                                           |
 | `controllerManager.identities.jwtTTL`                            | Indicates an upper-bound time-to-live for JWT SVIDs. If unset, the cluster default will be chosen.                                                                                                                                                                                                                                                                   | `""`                                                                                           |
 | `controllerManager.identities.admin`                             | Indicates any pod matched by this identity will be an admin. Use this with extreme care.                                                                                                                                                                                                                                                                             | `false`                                                                                        |
-| `controllerManager.identities.downstream`                        | | Set if this spire instance is a root server and the workloads are downstream servers.                                                                                                                                                                                                                                                                              | `false`                                                                                        |
+| `controllerManager.identities.downstream`                        | Set if this spire instance is a root server and the workloads are downstream servers.                                                                                                                                                                                                                                                                                | `false`                                                                                        |
 | `controllerManager.validatingWebhookConfiguration.failurePolicy` | Action when identity is not issued                                                                                                                                                                                                                                                                                                                                   | `Fail`                                                                                         |
 | `tools.kubectl.image.registry`                                   | The OCI registry to pull the image from                                                                                                                                                                                                                                                                                                                              | `docker.io`                                                                                    |
 | `tools.kubectl.image.repository`                                 | The repository within the registry                                                                                                                                                                                                                                                                                                                                   | `rancher/kubectl`                                                                              |
diff --git a/charts/spire/charts/spire-server/values.yaml b/charts/spire/charts/spire-server/values.yaml
index cf7b96b63..cc6f88dce 100644
--- a/charts/spire/charts/spire-server/values.yaml
+++ b/charts/spire/charts/spire-server/values.yaml
@@ -467,7 +467,7 @@ controllerManager:
     jwtTTL: ""
     ## @param controllerManager.identities.admin Indicates any pod matched by this identity will be an admin. Use this with extreme care.
     admin: false
-    ## @param controllerManager.identities.downstream | Set if this spire instance is a root server and the workloads are downstream servers.
+    ## @param controllerManager.identities.downstream Set if this spire instance is a root server and the workloads are downstream servers.
     downstream: false
 
   validatingWebhookConfiguration: