# External Secrets Operator helm values
# Uses EC2 instance role for AWS auth - no credentials needed
# cert-manager handles webhook TLS instead of the built-in cert-controller
installCRDs: true

certController:
  create: false

webhook:
  certManager:
    enabled: true
    cert:
      issuerRef:
        name: letsencrypt-prod
        kind: ClusterIssuer