imfreedom/k8s-cluster

Update cert-manager to 1.6.1

2022-01-16, Gary Kramlich
735aa6263324
Parents e1eafe6b53ed
Children 743ac0c4c0d8
Update cert-manager to 1.6.1
1 files changed, 296 insertions(+), 128 deletions(-)
  • +296 -128
    10-cert-manager/cert-manager.yaml
    • --- a/10-cert-manager/cert-manager.yaml Sun Jan 16 15:00:59 2022 -0600
    +++ b/10-cert-manager/cert-manager.yaml Sun Jan 16 15:04:13 2022 -0600
    @@ -26,7 +26,7 @@
    app.kubernetes.io/name: 'cert-manager'
    app.kubernetes.io/instance: 'cert-manager'
    # Generated labels
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    group: cert-manager.io
    names:
    @@ -228,7 +228,7 @@
    description: FailureTime stores the time that this CertificateRequest failed. This is used to influence garbage collection and back-off.
    type: string
    format: date-time
    - served: true
    + served: false
    storage: false
    - name: v1alpha3
    subresources:
    @@ -397,7 +397,7 @@
    description: FailureTime stores the time that this CertificateRequest failed. This is used to influence garbage collection and back-off.
    type: string
    format: date-time
    - served: true
    + served: false
    storage: false
    - name: v1beta1
    subresources:
    @@ -568,7 +568,7 @@
    description: FailureTime stores the time that this CertificateRequest failed. This is used to influence garbage collection and back-off.
    type: string
    format: date-time
    - served: true
    + served: false
    storage: false
    - name: v1
    subresources:
    @@ -754,7 +754,7 @@
    app.kubernetes.io/name: 'cert-manager'
    app.kubernetes.io/instance: 'cert-manager'
    # Generated labels
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    group: cert-manager.io
    names:
    @@ -1104,7 +1104,7 @@
    revision:
    description: "The current 'revision' of the certificate as issued. \n When a CertificateRequest resource is created, it will have the `cert-manager.io/certificate-revision` set to one greater than the current value of this field. \n Upon issuance, this field will be set to the value of the annotation on the CertificateRequest resource used to issue the certificate. \n Persisting the value on the CertificateRequest resource allows the certificates controller to know whether a request is part of an old issuance or if it is part of the ongoing revision's issuance by checking if the revision value in the annotation is greater than this field."
    type: integer
    - served: true
    + served: false
    storage: false
    - name: v1alpha3
    subresources:
    @@ -1421,7 +1421,7 @@
    revision:
    description: "The current 'revision' of the certificate as issued. \n When a CertificateRequest resource is created, it will have the `cert-manager.io/certificate-revision` set to one greater than the current value of this field. \n Upon issuance, this field will be set to the value of the annotation on the CertificateRequest resource used to issue the certificate. \n Persisting the value on the CertificateRequest resource allows the certificates controller to know whether a request is part of an old issuance or if it is part of the ongoing revision's issuance by checking if the revision value in the annotation is greater than this field."
    type: integer
    - served: true
    + served: false
    storage: false
    - name: v1beta1
    subresources:
    @@ -1740,7 +1740,7 @@
    revision:
    description: "The current 'revision' of the certificate as issued. \n When a CertificateRequest resource is created, it will have the `cert-manager.io/certificate-revision` set to one greater than the current value of this field. \n Upon issuance, this field will be set to the value of the annotation on the CertificateRequest resource used to issue the certificate. \n Persisting the value on the CertificateRequest resource allows the certificates controller to know whether a request is part of an old issuance or if it is part of the ongoing revision's issuance by checking if the revision value in the annotation is greater than this field."
    type: integer
    - served: true
    + served: false
    storage: false
    - name: v1
    subresources:
    @@ -2075,7 +2075,7 @@
    app.kubernetes.io/name: 'cert-manager'
    app.kubernetes.io/instance: 'cert-manager'
    # Generated labels
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    group: acme.cert-manager.io
    names:
    @@ -2274,6 +2274,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -2281,10 +2282,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -2680,7 +2694,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -2761,7 +2775,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -2849,7 +2863,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -2930,7 +2944,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -3061,7 +3075,7 @@
    - invalid
    - expired
    - errored
    - served: true
    + served: false
    storage: false
    subresources:
    status: {}
    @@ -3231,6 +3245,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -3238,10 +3253,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -3637,7 +3665,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -3718,7 +3746,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -3806,7 +3834,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -3887,7 +3915,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -4018,7 +4046,7 @@
    - invalid
    - expired
    - errored
    - served: true
    + served: false
    storage: false
    subresources:
    status: {}
    @@ -4189,6 +4217,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -4196,10 +4225,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -4595,7 +4637,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -4676,7 +4718,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -4764,7 +4806,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -4845,7 +4887,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -4976,7 +5018,7 @@
    - invalid
    - expired
    - errored
    - served: true
    + served: false
    storage: false
    subresources:
    status: {}
    @@ -5147,6 +5189,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -5154,10 +5197,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -5553,7 +5609,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -5634,7 +5690,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -5722,7 +5778,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -5803,7 +5859,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -5951,7 +6007,7 @@
    app.kubernetes.io/name: 'cert-manager'
    app.kubernetes.io/instance: 'cert-manager'
    # Generated labels
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    group: cert-manager.io
    names:
    @@ -6184,6 +6240,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -6191,10 +6248,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -6590,7 +6660,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -6671,7 +6741,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -6759,7 +6829,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -6840,7 +6910,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -7150,7 +7220,7 @@
    type:
    description: Type of the condition, known values are (`Ready`).
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1alpha3
    subresources:
    @@ -7353,6 +7423,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -7360,10 +7431,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -7759,7 +7843,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -7840,7 +7924,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -7928,7 +8012,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -8009,7 +8093,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -8319,7 +8403,7 @@
    type:
    description: Type of the condition, known values are (`Ready`).
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1beta1
    subresources:
    @@ -8524,6 +8608,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -8531,10 +8616,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -8930,7 +9028,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -9011,7 +9109,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -9099,7 +9197,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -9180,7 +9278,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -9490,7 +9588,7 @@
    type:
    description: Type of the condition, known values are (`Ready`).
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1
    subresources:
    @@ -9695,6 +9793,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -9702,10 +9801,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -10101,7 +10213,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -10182,7 +10294,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -10270,7 +10382,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -10351,7 +10463,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -10676,7 +10788,7 @@
    app.kubernetes.io/name: 'cert-manager'
    app.kubernetes.io/instance: 'cert-manager'
    # Generated labels
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    group: cert-manager.io
    names:
    @@ -10909,6 +11021,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -10916,10 +11029,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -11315,7 +11441,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -11396,7 +11522,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -11484,7 +11610,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -11565,7 +11691,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -11875,7 +12001,7 @@
    type:
    description: Type of the condition, known values are (`Ready`).
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1alpha3
    subresources:
    @@ -12078,6 +12204,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -12085,10 +12212,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -12484,7 +12624,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -12565,7 +12705,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -12653,7 +12793,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -12734,7 +12874,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -13044,7 +13184,7 @@
    type:
    description: Type of the condition, known values are (`Ready`).
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1beta1
    subresources:
    @@ -13249,6 +13389,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -13256,10 +13397,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -13655,7 +13809,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -13736,7 +13890,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -13824,7 +13978,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -13905,7 +14059,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -14215,7 +14369,7 @@
    type:
    description: Type of the condition, known values are (`Ready`).
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1
    subresources:
    @@ -14420,6 +14574,7 @@
    description: 'Name of the resource being referred to. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
    type: string
    environment:
    + description: name of the Azure environment (default AzurePublicCloud)
    type: string
    enum:
    - AzurePublicCloud
    @@ -14427,10 +14582,23 @@
    - AzureGermanCloud
    - AzureUSGovernmentCloud
    hostedZoneName:
    - type: string
    + description: name of the DNS zone that should be used
    + type: string
    + managedIdentity:
    + description: managed identity configuration, can not be used at the same time as clientID, clientSecretSecretRef or tenantID
    + type: object
    + properties:
    + clientID:
    + description: client ID of the managed identity, can not be used at the same time as resourceID
    + type: string
    + resourceID:
    + description: resource ID of the managed identity, can not be used at the same time as clientID
    + type: string
    resourceGroupName:
    + description: resource group the DNS zone is located in
    type: string
    subscriptionID:
    + description: ID of the Azure subscription
    type: string
    tenantID:
    description: when specifying ClientID and ClientSecret then this field is also needed
    @@ -14826,7 +14994,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -14907,7 +15075,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -14995,7 +15163,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -15076,7 +15244,7 @@
    additionalProperties:
    type: string
    namespaceSelector:
    - description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is alpha-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    + description: A label query over the set of namespaces that the term applies to. The term is applied to the union of the namespaces selected by this field and the ones listed in the namespaces field. null selector and null or empty namespaces list means "this pod's namespace". An empty selector ({}) matches all namespaces. This field is beta-level and is only honored when PodAffinityNamespaceSelector feature is enabled.
    type: object
    properties:
    matchExpressions:
    @@ -15401,7 +15569,7 @@
    app.kubernetes.io/name: 'cert-manager'
    app.kubernetes.io/instance: 'cert-manager'
    # Generated labels
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    group: acme.cert-manager.io
    names:
    @@ -15589,7 +15757,7 @@
    url:
    description: URL of the Order. This will initially be empty when the resource is first created. The Order controller will populate this field when the Order is first processed. This field will be immutable after it is initially set.
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1alpha3
    subresources:
    @@ -15746,7 +15914,7 @@
    url:
    description: URL of the Order. This will initially be empty when the resource is first created. The Order controller will populate this field when the Order is first processed. This field will be immutable after it is initially set.
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1beta1
    subresources:
    @@ -15904,7 +16072,7 @@
    url:
    description: URL of the Order. This will initially be empty when the resource is first created. The Order controller will populate this field when the Order is first processed. This field will be immutable after it is initially set.
    type: string
    - served: true
    + served: false
    storage: false
    - name: v1
    subresources:
    @@ -16082,7 +16250,7 @@
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cainjector"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    ---
    # Source: cert-manager/templates/serviceaccount.yaml
    apiVersion: v1
    @@ -16096,7 +16264,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    ---
    # Source: cert-manager/templates/webhook-serviceaccount.yaml
    apiVersion: v1
    @@ -16110,7 +16278,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    ---
    # Source: cert-manager/templates/cainjector-rbac.yaml
    apiVersion: rbac.authorization.k8s.io/v1
    @@ -16122,7 +16290,7 @@
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cainjector"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["cert-manager.io"]
    resources: ["certificates"]
    @@ -16157,7 +16325,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["cert-manager.io"]
    resources: ["issuers", "issuers/status"]
    @@ -16183,7 +16351,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["cert-manager.io"]
    resources: ["clusterissuers", "clusterissuers/status"]
    @@ -16209,7 +16377,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["cert-manager.io"]
    resources: ["certificates", "certificates/status", "certificaterequests", "certificaterequests/status"]
    @@ -16244,7 +16412,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["acme.cert-manager.io"]
    resources: ["orders", "orders/status"]
    @@ -16282,7 +16450,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    # Use to update challenge resource status
    - apiGroups: ["acme.cert-manager.io"]
    @@ -16342,7 +16510,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["cert-manager.io"]
    resources: ["certificates", "certificaterequests"]
    @@ -16379,7 +16547,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rbac.authorization.k8s.io/aggregate-to-view: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    @@ -16401,7 +16569,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
    rules:
    @@ -16423,7 +16591,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cert-manager"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["cert-manager.io"]
    resources: ["signers"]
    @@ -16443,7 +16611,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cert-manager"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["certificates.k8s.io"]
    resources: ["certificatesigningrequests"]
    @@ -16469,7 +16637,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: ["authorization.k8s.io"]
    resources: ["subjectaccessreviews"]
    @@ -16485,7 +16653,7 @@
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cainjector"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16505,7 +16673,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16525,7 +16693,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16545,7 +16713,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16565,7 +16733,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16585,7 +16753,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16605,7 +16773,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16625,7 +16793,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cert-manager"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16645,7 +16813,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cert-manager"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16665,7 +16833,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    @@ -16688,7 +16856,7 @@
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cainjector"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    # Used for leader election by the controller
    # cert-manager-cainjector-leader-election is used by the CertificateBased injector controller
    @@ -16722,7 +16890,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    # Used for leader election by the controller
    # See also: https://github.com/kubernetes-sigs/controller-runtime/pull/1144#discussion_r480173688
    @@ -16752,7 +16920,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    rules:
    - apiGroups: [""]
    resources: ["secrets"]
    @@ -16777,7 +16945,7 @@
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cainjector"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: Role
    @@ -16800,7 +16968,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: Role
    @@ -16822,7 +16990,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: Role
    @@ -16844,7 +17012,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    type: ClusterIP
    ports:
    @@ -16868,7 +17036,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    type: ClusterIP
    ports:
    @@ -16892,7 +17060,7 @@
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cainjector"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    replicas: 1
    selector:
    @@ -16907,14 +17075,14 @@
    app.kubernetes.io/name: cainjector
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "cainjector"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    serviceAccountName: cert-manager-cainjector
    securityContext:
    runAsNonRoot: true
    containers:
    - name: cert-manager
    - image: "quay.io/jetstack/cert-manager-cainjector:v1.5.4"
    + image: "quay.io/jetstack/cert-manager-cainjector:v1.6.1"
    imagePullPolicy: IfNotPresent
    args:
    - --v=2
    @@ -16938,7 +17106,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    replicas: 1
    selector:
    @@ -16953,7 +17121,7 @@
    app.kubernetes.io/name: cert-manager
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "controller"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    annotations:
    prometheus.io/path: "/metrics"
    prometheus.io/scrape: 'true'
    @@ -16964,7 +17132,7 @@
    runAsNonRoot: true
    containers:
    - name: cert-manager
    - image: "quay.io/jetstack/cert-manager-controller:v1.5.4"
    + image: "quay.io/jetstack/cert-manager-controller:v1.6.1"
    imagePullPolicy: IfNotPresent
    args:
    - --v=2
    @@ -16992,7 +17160,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    replicas: 1
    selector:
    @@ -17007,14 +17175,14 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    spec:
    serviceAccountName: cert-manager-webhook
    securityContext:
    runAsNonRoot: true
    containers:
    - name: cert-manager
    - image: "quay.io/jetstack/cert-manager-webhook:v1.5.4"
    + image: "quay.io/jetstack/cert-manager-webhook:v1.6.1"
    imagePullPolicy: IfNotPresent
    args:
    - --v=2
    @@ -17064,7 +17232,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    annotations:
    cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-ca"
    webhooks:
    @@ -17113,7 +17281,7 @@
    app.kubernetes.io/name: webhook
    app.kubernetes.io/instance: cert-manager
    app.kubernetes.io/component: "webhook"
    - app.kubernetes.io/version: "v1.5.4"
    + app.kubernetes.io/version: "v1.6.1"
    annotations:
    cert-manager.io/inject-ca-from-secret: "cert-manager/cert-manager-webhook-ca"
    webhooks: