From 3d3759ea2fe380fc7b77f35d4441b39b775d3ef5 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Fri, 3 Apr 2026 23:44:49 +0300
Subject: [PATCH] fix: disable cert-manager webhook for pvc-autoresizer, use
 self-signed cert [ci skip]

Cluster doesn't have cert-manager installed. Use self-signed certificate
for the controller and disable the PVC mutating webhook (annotations are
set directly on PVCs via Terraform).
---
 stacks/pvc-autoresizer/modules/pvc-autoresizer/main.tf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/stacks/pvc-autoresizer/modules/pvc-autoresizer/main.tf b/stacks/pvc-autoresizer/modules/pvc-autoresizer/main.tf
index 978a6876..1728175d 100644
--- a/stacks/pvc-autoresizer/modules/pvc-autoresizer/main.tf
+++ b/stacks/pvc-autoresizer/modules/pvc-autoresizer/main.tf
@@ -35,5 +35,13 @@ resource "helm_release" "pvc_autoresizer" {
         }
       }
     }
+    webhook = {
+      certificate = {
+        generate = true
+      }
+      pvcMutatingWebhook = {
+        enabled = false
+      }
+    }
   })]
 }