Operator helm chart is not idempotent - certificates are renewed on each "helm upgrade"?

[kastl-ars]

Dear maintainers,

I have been playing with CockroachDB and the helm charts. It looks like the operator chart creates new TLS certificates each time the user runs a helm install or helm upgrade.

This might make it harder in GitOps enviroments, where the chart would be shown as "out of sync" or "syncing" on every sync (i.e. every couple of minutes).

I found no way to disable this recreation or to have the operator chart use existing user-provided charts.

Kind Regards,
Johannes