installCRDs: true
extraArgs:
  - --feature-gates=ExperimentalGatewayAPISupport=true
# TODO: we need to sync the image to ecr to avoid relying on quay.io
serviceAccount:
  annotations:
    azure.workload.identity/client-id: 08048b25-80d2-454a-99b6-b2d55d3da70a
podLabels:
  azure.workload.identity/use: "true"
securityContext:
  fsGroup: 1001
image:
  repository: quay.io/jetstack/cert-manager-controller
webhook:
  image:
    repository: quay.io/jetstack/cert-manager-webhook
caInjector:
  image:
    repository: quay.io/jetstack/cert-manager-cainjector
acmeResolver:
  image:
    repository: quay.io/jetstack/cert-manager-acmesolver
startupapicheck:
  image:
    repository: quay.io/jetstack/cert-manager-startupapicheck