We could add some documentation briefly explaining how to install cert-manager using gitops systems like Flux or Anthos.

There are some known issues around the installation of CRDs and the subsequent injection of webhook caBundles into the CRDs where.

For example this conversations in Slack (https://kubernetes.slack.com/archives/C4NV3DWUC/p1599044537041800) where it is said that Flux does not work well with cert-manager upgrades.
Perhaps because as it upgrades CRDs it clobbers the injected caBundles and then attempts to read the state of the existing certificates before the caBundles have been re-injected and gets stuck because its calls to the K8S API server require a call to the (now unreachable) conversion webhook.

It could very well be that I have misunderstood the problem description, and I certainly don't know very much about Flux

But it would be good to try it, document any problems that do exist.

/cc @munnerz @meyskens @jfrancisco0

See also:

• GitOps support cert-manager#2197