From 14130e4454e7ba29ed5294f086d12a228b5bb4d9 Mon Sep 17 00:00:00 2001
From: Ian Keane <ian@keane.sh>
Date: Wed, 19 Aug 2026 09:34:16 -0400
Subject: [PATCH] Disable ESO cert controller

---
 charts/external-secrets/values.yaml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/charts/external-secrets/values.yaml b/charts/external-secrets/values.yaml
index a76df3c..a1af09f 100644
--- a/charts/external-secrets/values.yaml
+++ b/charts/external-secrets/values.yaml
@@ -1,4 +1,15 @@
 # External Secrets Operator helm values
-# https://external-secrets.io/latest/introduction/getting-started/
 # Uses EC2 instance role for AWS auth - no credentials needed
+# cert-manager handles webhook TLS instead of the built-in cert-controller
 installCRDs: true
+
+certController:
+  create: false
+
+webhook:
+  certManager:
+    enabled: true
+    cert:
+      issuerRef:
+        name: letsencrypt-prod
+        kind: ClusterIssuer