Overview:

When rotating the leaf certificate of admission-control, if the CA that was used to sign the leaf certificate is changed, the caBundle field of the ValidatingWebhookConfiguration must be updated to contain the new CA.

The ValidatingWebhookConfiguration is owned by the Helm (or Operator). This ticket is to a way to propagate the CA bundle using Helm. It will most likely require some manual steps for the user to take, unlike the operator which can do this automatically.

A high level summary that describes this Task in a clear, concise way. Complete during New status.

Acceptance Criteria:

A list of specific needs or objectives that this task must deliver in order to be considered complete. Complete during Refinement status.