diff --git a/examples/shoot2.yaml b/examples/shoot2.yaml
index bc81396..91d80d1 100644
--- a/examples/shoot2.yaml
+++ b/examples/shoot2.yaml
@@ -18,11 +18,11 @@ metadata:
   name: local2
   namespace: garden-local
   annotations:
-    shoot.gardener.cloud/infrastructure-cleanup-wait-period-seconds: "0"
+    shoot.gardener.cloud/cloud-config-execution-max-delay-seconds: "0"
+    authentication.gardener.cloud/issuer: "managed"
 spec:
-  seedName: local
   cloudProfileName: local
-  secretBindingName: local
+  secretBindingName: local # dummy, doesn't contain any credentials
   region: local
   ### In shoot local2 extension is required and not disabled with own config to test override.
   extensions:
@@ -76,23 +76,24 @@ spec:
 
   networking:
     type: calico
-    providerConfig:
-      apiVersion: calico.networking.extensions.gardener.cloud/v1alpha1
-      kind: NetworkConfig
-      backend: none
-      typha:
-        enabled: false
+    nodes: 10.10.0.0/16
   provider:
     type: local
     workers:
-      - name: local
-        machine:
-          type: local
-        cri:
-          name: containerd
-        minimum: 1
-        maximum: 1
-        maxSurge: 1
-        maxUnavailable: 0
+    - name: local
+      machine:
+        type: local
+      cri:
+        name: containerd
+      minimum: 1
+      maximum: 2
+      maxSurge: 1
+      maxUnavailable: 0
   kubernetes:
-    version: 1.27.1 # please keep that in sync with test/e2e/cri-resmgr-extension/common_test.go "kubernetesVersion" 1
+    kubelet:
+      seccompDefault: true
+      serializeImagePulls: false
+      registryPullQPS: 10
+      registryBurst: 20
+      protectKernelDefaults: true
+      streamingConnectionIdleTimeout: 5m