From 43a62ff48f801b44bb8974ea1953421b04459089 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Fri, 23 Oct 2026 17:20:15 +0200
Subject: [PATCH] cert-manager: upgrade to v1.21.2

1.21 supports Kubernetes 1.33 to 1.36. The chart no longer creates the tokenrequest Role and RoleBinding; nothing uses them, as the only issuer is ACME with HTTP-01 and no serviceAccountRef.
---
 apps/templates/cert-manager-helm.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/templates/cert-manager-helm.yaml b/apps/templates/cert-manager-helm.yaml
index f6e7e79..f1ca981 100644
--- a/apps/templates/cert-manager-helm.yaml
+++ b/apps/templates/cert-manager-helm.yaml
@@ -12,7 +12,7 @@ spec:
   project: default
   source:
     repoURL: https://charts.jetstack.io
-    targetRevision: v1.20.4
+    targetRevision: v1.21.2
     chart: cert-manager
     helm:
       parameters: