Example: Cert-manager webhook install

Requires cert-manager

Enable webhooks.certManager.create: true only when cert-manager is already installed in the cluster. The chart creates a Certificate for the validating webhook.

webhooks.certManager.create: true → webhook-server-cert (ADR-0105).

Install cert-manager, then Kollect Helm chart. Profile webhook blocks Secret.data without opt-in annotation.