chart/README.md update

chart/README.md

@@ -71,11 +71,10 @@ Helm chart to deploy CAP Operator https://sap.github.io/cap-operator/
 | subscriptionServer.ingressGatewayLabels | object | `{"app":"istio-ingressgateway","istio":"ingressgateway"}` | Labels used to identify the istio ingress-gateway component |
 | subscriptionServer.dnsTarget | string | `"public-ingress.clusters.cs.services.sap"` | The dns target mentioned on the public ingress gateway service used in the cluster |
 | subscriptionServer.domain | string | `"cap-operator.clusters.cs.services.sap"` | The domain under which the cap operator subscription server would be available |
-| subscriptionServer.certManager.enabled | bool | `false` | Whether to use cert-manager to manage subscription server tls |
-| subscriptionServer.certManager.issuerGroup | string | `""` | Issuer group (only relevant if enabled is true; if unset, the default cert-manager group is used) |
-| subscriptionServer.certManager.issuerKind | string | `""` | Issuer kind (only relevant if enabled is true; if unset, the default cert-manager type 'Issuer' is used) |
-| subscriptionServer.certManager.issuerName | string | `""` | Issuer name (only relevant if enabled is true; if unset, a self-signed issuer is used) |
-
+| subscriptionServer.gardener | object | `{"enabled":true,"issuerName":"","issuerNamespace":""}` | Gardener |
+| subscriptionServer.gardener.enabled | bool | `true` | Whether to use gardener to manage server certificates |
+| subscriptionServer.gardener.issuerName | string | `""` | Issuer name (only relevant if enabled is true) |
+| subscriptionServer.gardener.issuerNamespace | string | `""` | Issuer namespace (only relevant if enabled is true) |
 | webhook.sidecar | bool | `false` | Side car to mount admission review |
 | webhook.replicas | int | `1` | Replicas |
 | webhook.image.repository | string | `"ghcr.io/sap/cap-operator/web-hooks"` | Image repository |
@@ -99,8 +98,9 @@ Helm chart to deploy CAP Operator https://sap.github.io/cap-operator/
 | webhook.service.type | string | `"ClusterIP"` | Service type |
 | webhook.service.port | int | `443` | Service port |
 | webhook.service.targetPort | int | `1443` | Target port |
+| webhook.certManager | object | `{"enabled":false,"issuerGroup":"","issuerKind":"","issuerName":""}` | Cert Manager |
 | webhook.certManager.enabled | bool | `false` | Whether to use cert-manager to manage webhook tls |
-| webhook.certManager.issuerGroup | string | `""` | Issuer group (only relevant if enabled is true; if unset, the default cert-manager group is used) |
-| webhook.certManager.issuerKind | string | `""` | Issuer kind (only relevant if enabled is true; if unset, the default cert-manager type 'Issuer' is used) |
-| webhook.certManager.issuerName | string | `""` | Issuer name (only relevant if enabled is true; if unset, a self-signed issuer is used) |
+| webhook.certManager.issuerGroup | string | `""` | Issuer group (only relevant if enabled is true) |
+| webhook.certManager.issuerKind | string | `""` | Issuer kind (only relevant if enabled is true) |
+| webhook.certManager.issuerName | string | `""` | Issuer name (only relevant if enabled is true) |