diff --git a/charts/external-secrets/values.yaml b/charts/external-secrets/values.yaml
index a76df3c..a1af09f 100644
--- a/charts/external-secrets/values.yaml
+++ b/charts/external-secrets/values.yaml
@@ -1,4 +1,15 @@
 # External Secrets Operator helm values
-# https://external-secrets.io/latest/introduction/getting-started/
 # Uses EC2 instance role for AWS auth - no credentials needed
+# cert-manager handles webhook TLS instead of the built-in cert-controller
 installCRDs: true
+
+certController:
+  create: false
+
+webhook:
+  certManager:
+    enabled: true
+    cert:
+      issuerRef:
+        name: letsencrypt-prod
+        kind: ClusterIssuer