From 269136bee9252d743da0edb0c261a3e15a2f8e66 Mon Sep 17 00:00:00 2001
From: jenkins <jenkins@bstein.dev>
Date: Wed, 20 May 2026 04:51:39 -0300
Subject: [PATCH] ops(cert-manager): keep admission webhook available

---
 infrastructure/cert-manager/helmrelease.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/infrastructure/cert-manager/helmrelease.yaml b/infrastructure/cert-manager/helmrelease.yaml
index e48a1bd6..aa76ba4a 100644
--- a/infrastructure/cert-manager/helmrelease.yaml
+++ b/infrastructure/cert-manager/helmrelease.yaml
@@ -27,6 +27,10 @@ spec:
     timeout: 10m
   values:
     installCRDs: true
+    replicaCount: 2
+    podDisruptionBudget:
+      enabled: true
+      minAvailable: 1
     extraArgs:
       - --acme-http01-solver-nameservers=1.1.1.1:53,8.8.8.8:53
     resources:
@@ -79,6 +83,10 @@ spec:
                     - rpi5
                     - rpi4
     webhook:
+      replicaCount: 2
+      podDisruptionBudget:
+        enabled: true
+        minAvailable: 1
       resources:
         requests:
           cpu: 100m
@@ -141,6 +149,10 @@ spec:
                       - rpi5
                       - rpi4
     cainjector:
+      replicaCount: 2
+      podDisruptionBudget:
+        enabled: true
+        minAvailable: 1
       resources:
         requests:
           cpu: 50m