# External Secrets Operator helm values
# Uses EC2 instance role for AWS auth - no credentials needed
# cert-manager handles webhook TLS with a self-signed issuer (internal cluster DNS,
# not publicly routable - Let's Encrypt cannot issue for these names)
installCRDs: true

certController:
  create: false

webhook:
  certManager:
    enabled: true
    cert:
      issuerRef:
        name: selfsigned
        kind: Issuer