Disabling cert manager dependency as part of helm install

[doddisam]

Background

Our K8's cluster already has cert manager installed. We do want to generate internal certs using that cert manager and create below secrets.

controllers-webhook-server-cert
korifi-api-internal-cert

Is is possible to just create internal certs from our cert manager and add it as secrets manually with same name or its by default helm just tries to create it during the install?

Basically looking for a way to bypass the internal cert generation step during the install. Instead generated those required certs and add manually as secrets and install.

Action to take

No response

Impact

Our K8's cluster already has cert manager installed. We do want to generate certs using that cert manager and create below secrets.

controllers-webhook-server-cert
korifi-api-internal-cert

Is is possible to just create certs from our cert manager and add it as secrets manually with same name or its by default helm just tries to create it during the install?

Basically looking for a way to bypass the cert generation step during the install. Instead generated those required certs and add manually as secrets and install.

Dev Notes

No response

[georgethebeatle]

Hey @doddisam,

Currently the dependency to the cert manager cannot be easily turned off. We use cert manager certificates to configure Korifi webhooks with CA bundles via the cert-manager.io/inject-ca-from annotation

At the moment one can easily use their own certificates for both the API and workloads via setting the generateIngressCertificates helm value to false. However, the issue with webhook certificates above remains.

We realise that such a dependency might be incovenient in alternative deployment scenarios. Would you be interested into proposing/PRing a way to make this dependency optional?