From c6b706a136d8fda4cac72a02d827b1e84ca78633 Mon Sep 17 00:00:00 2001
From: Valentin Haudiquet <valentin.haudiquet@canonical.com>
Date: Fri, 10 Jul 2026 00:21:08 +0200
Subject: [PATCH] fix: fix semery.fr ovh webhook provider

---
 .../cert-manager-webhook-ovh/values.yaml      | 42 +++++++++++--------
 1 file changed, 25 insertions(+), 17 deletions(-)

diff --git a/kubernetes/system/cert-manager-webhook-ovh/values.yaml b/kubernetes/system/cert-manager-webhook-ovh/values.yaml
index d74caa1..dafa2f0 100644
--- a/kubernetes/system/cert-manager-webhook-ovh/values.yaml
+++ b/kubernetes/system/cert-manager-webhook-ovh/values.yaml
@@ -1,4 +1,12 @@
 # cert-manager-webhook-ovh Values
+# groupName must match the ClusterIssuer webhook stanza
+groupName: acme.aureq.com
+# cert-manager deployment configuration for RBAC
+# The webhook creates ClusterRole/RoleBinding so cert-manager's
+# service account can create the "ovh" ChallengePayload resources
+certManager:
+    namespace: cert-manager
+    serviceAccountName: cert-manager
 # Replicas
 replicaCount: 1
 # Resource settings
@@ -10,27 +18,27 @@ resources:
         cpu: 100m
         memory: 128Mi
 sops:
-    lastmodified: "2026-07-09T22:12:21Z"
-    mac: ENC[AES256_GCM,data:WC6VezA/Ks5BxalXRBWIGwBt9k0pTUY8etW33aBT7PrWFqQVC6XlHs4z6KHU0ka6uMc1JSaprw5QdvrOr1kKQUqgIJn9v/qELT8alOd9qzJkyLImEyH7NdI8N5hzgeEpFT1O0B+tFJ4IVxcQAQusr30dZo1AUE8JV2EUEE0OaJI=,iv:KuzSPwYaYm6cf0FBRKRXlK6m9lNVKtdhxnQryGRGtlw=,tag:ES71sI0rUctXhHXtFJ0nQg==,type:str]
+    lastmodified: "2026-07-09T22:21:08Z"
+    mac: ENC[AES256_GCM,data:+aCnXp1u61O28hfFnQ7o1Cc1c8KGsp+mqraMpkEKHeRZCzBnBhbxCK0Nyezd06fPQAvFnRL3VdTb9I4E7uNs+9SGGwCtDcFz6+6kdP3VvM83Kd8CXBytrz82yuYrrKS2GKrFhzwg6P2Y0Vx1zr1FnvVMDUWwuyTvsjP8LZETyY4=,iv:Qfio7SbDdx4E5VXc/6avOk++FvRfwuRV4PXkFtoCor4=,tag:RbNx47LZJeMTFO6eWib2yg==,type:str]
     pgp:
-        - created_at: "2026-07-09T22:12:21Z"
+        - created_at: "2026-07-09T22:21:08Z"
           enc: |-
             -----BEGIN PGP MESSAGE-----
 
-            hQIMA7uy4qQr71wiAQ//bXWkHjGoQhrI1yEwJSAi3j68wFOdO/GdGhX3ADZw8njM
-            b0fQdk+3WI7IDXV9l+Ii2PHP2gMZs8S+ejKXdhMrd28xefxwuJ5dtuOjhxdAPA7M
-            2jc8gitEpQW/TKHlyDfgaWIqLeJ/O/kuhYRfl0hQ3gYMjoHwZl/rrYlbSTT6jRLH
-            pbjILIIo3BAXQQJgthd+y7YL6G4QjVB96wgmPEoD7FBjarNZPlPpG7EzcPj6WB9a
-            rs3o7uudhjWZIKrJm0qbABxnkd1IPwwNvc/bvVMeXFPP3w8ZAD6spvBMPzrfGfSb
-            45SWw4lhwR57hrsK/cGVlQSwkJxhopndvk/apb2oE4q6dUbHSX21bRmjR+HO6E5A
-            eZgb8mcWFLgWmjrrAgZWvOSABV18s2d3EF6Vi8gAn8iLr6FjJcb3cfptbNOp26bT
-            2nGW5Ws3UZQEzcDveUJACJRhz7pir0Cn8kZ2xsdYX0KThJ62q9b13X05nisnPVVy
-            Q/NFPDTOBWIjh/TxaaOe2CXJxnKHSnxmLbfIFFOimc/P8HyBwFRT2L7MRKosTqI/
-            9zKyppxoi0Cu0KPG/0hF6FN7sQ32oPQwuzuaxhuIYIzyXoohrZ1QvlV7ZsFneHcl
-            0izl8HdM6+1CBy4Oiok6dWr1tGKuQVucWUUUDyvUg4h19LLNMT5eJe0/w1wsis/S
-            XgEE7DsaGavusuoEfkfx2y11mMHl6qnMNQgcRBLfq2vEpPgA4U3FB0lNrgMc5oHe
-            PdiBa789boiYQ13+XJIfgDkUrF9Isznkak7PYiCRgpp3LhlKVSqLasTdSKYm93g=
-            =0cB0
+            hQIMA7uy4qQr71wiARAAuoBSIDiTImtFsKQRRYE26ClYc/O5QQPp3aTnRtFepl7q
+            1maRykfBUNIDVphhEw1IyG3VJdnQ/97Q+7K7xDO9l4V6R/jH/84ByoEvA/M01JRc
+            jZn5Z1TweXklO0H9RjKBwAXuJSQ7pH3knowF/vVf3tj3tuIBCFVDjjFtzDj/3wHl
+            AnrNqgofDMaLEObRrddhAD+cr85TBM58sFBM+8hN8+b7XkxJYPatYNLcY+f3XJ37
+            wNMgqCwwK8OU0+LBB52acPtyymY591aO2CR0Ui3IUZGCgO/gXQkh/m98cwOfoE3D
+            a/wIZxGmiUF/Fs6nwYl/ip1utMN2MY8LBMak7EXpGgidBipjhTJvXbDMjhHhesql
+            MpDrfKuHm6XBfedGo3OasvHR3S8QQN4IpdTugOw+S5nJX6uO6HyhA5f10xtQIr6f
+            LjCm1oBzMLm+CH1FYD2iBaz5Y+fFypg34FvblrR/JcYg1n8Q3zOM9oLLRHe5pNYZ
+            Mt2+TrWvnZYfzW1BIX+w+Wi5p2EBpo6NJ729DxsA++zWbk8uPQIOsF2FDmNIvw3Y
+            /Bz77VXKIDjvBiUBNWkOUVAu1SA180TaGyEE0Uv0MaFrlxTh5+1ZhJS5xLQRRias
+            N8sldC3ukw8OcJYoInqjZsfhr1zyDZsvUw5NeP5Kj3RI62sFZYidGbRYyEnYqVTS
+            XgHIcMhfj+fkWTm9V38CQiZ+nLTJu04KarkstJ6PtabIopqXYtqT2TO/elBswfLd
+            Oq2OhNufSkd5/0lCM+A/3F9WmWh32Uhai/GS/DfMszw6/7w2li7DC1V9Hzdv/DU=
+            =6dE5
             -----END PGP MESSAGE-----
           fp: DC6910268E657FF70BA7EC289974494E76938DDC
     encrypted_regex: ^(password|value|ssh-key|api-key|user|username|privateKey|clientSecret|clientId|apiKey|extraArgs.*|.*Secret.*|extraEnvVars|.*SECRET.*|.*secret.*|key|.*Password|.*\.ya?ml)$