fix(helm): update chart cert-manager ( v1.20.0 → v1.20.1 )

[renovate]

This PR contains the following updates:

Package	Update	Change
cert-manager (source)	patch	v1.20.0 → v1.20.1

---

Release Notes

cert-manager/cert-manager (cert-manager)

v1.20.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Path: infrastructure/cert-manager
Version: v1.20.0 -> v1.20.1

--- /tmp/tmp.aIJ3afoS7d	2026-03-27 21:17:43.529682741 +0000
+++ /tmp/tmp.78V6pzBsN7	2026-03-27 21:17:44.387679388 +0000
@@ -12769,6 +12769,9 @@
   - apiGroups: [ "acme.cert-manager.io" ]
     resources: [ "orders/finalizers" ]
     verbs: [ "update" ]
+  - apiGroups: [ "cert-manager.io" ]
+    resources: [ "clusterissuers/finalizers", "issuers/finalizers" ]
+    verbs: [ "update" ]
   - apiGroups: [ "" ]
     resources: [ "secrets" ]
     verbs: [ "get", "list", "watch" ]
@@ -13333,7 +13336,7 @@
           type: RuntimeDefault
       containers:
         - name: cert-manager-cainjector
-          image: "quay.io/jetstack/cert-manager-cainjector:v1.20.0"
+          image: "quay.io/jetstack/cert-manager-cainjector:v1.20.1"
           imagePullPolicy: IfNotPresent
           args:
             - --v=2
@@ -13386,13 +13389,13 @@
           type: RuntimeDefault
       containers:
         - name: cert-manager-controller
-          image: "quay.io/jetstack/cert-manager-controller:v1.20.0"
+          image: "quay.io/jetstack/cert-manager-controller:v1.20.1"
           imagePullPolicy: IfNotPresent
           args:
             - --v=2
             - --cluster-resource-namespace=$(POD_NAMESPACE)
             - --leader-election-namespace=kube-system
-            - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.20.0
+            - --acme-http01-solver-image=quay.io/jetstack/cert-manager-acmesolver:v1.20.1
             - --dns01-recursive-nameservers=1.1.1.1:53
             - --dns01-recursive-nameservers-only
             - --max-concurrent-challenges=60
@@ -13460,7 +13463,7 @@
           type: RuntimeDefault
       containers:
         - name: cert-manager-webhook
-          image: "quay.io/jetstack/cert-manager-webhook:v1.20.0"
+          image: "quay.io/jetstack/cert-manager-webhook:v1.20.1"
           imagePullPolicy: IfNotPresent
           args:
             - --v=2
@@ -13875,7 +13878,7 @@
           type: RuntimeDefault
       containers:
         - name: cert-manager-startupapicheck
-          image: "quay.io/jetstack/cert-manager-startupapicheck:v1.20.0"
+          image: "quay.io/jetstack/cert-manager-startupapicheck:v1.20.1"
           imagePullPolicy: IfNotPresent
           args:
             - check