ops(cert-manager): keep admission webhook available

infrastructure/cert-manager/helmrelease.yaml

@@ -27,6 +27,10 @@ spec:
     timeout: 10m
   values:
     installCRDs: true
+    replicaCount: 2
+    podDisruptionBudget:
+      enabled: true
+      minAvailable: 1
     extraArgs:
       - --acme-http01-solver-nameservers=1.1.1.1:53,8.8.8.8:53
     resources:
@@ -79,6 +83,10 @@ spec:
                     - rpi5
                     - rpi4
     webhook:
+      replicaCount: 2
+      podDisruptionBudget:
+        enabled: true
+        minAvailable: 1
       resources:
         requests:
           cpu: 100m
@@ -141,6 +149,10 @@ spec:
                       - rpi5
                       - rpi4
     cainjector:
+      replicaCount: 2
+      podDisruptionBudget:
+        enabled: true
+        minAvailable: 1
       resources:
         requests:
           cpu: 50m