Upgrade Cert Manager (requires CRD manually installed)
We must upgrade Cert Manager to at least 0.8.0
as older versions are going to be blocked by Let's Encrypt on November 1 per https://community.letsencrypt.org/t/blocking-old-cert-manager-versions/98753
New version requires some code changes
Before we can upgrade the Helm chart version used in GitLab managed apps to > 0.6 we will need to also add some code that ensures the CRDs are installed on the cluster per https://docs.cert-manager.io/en/latest/tasks/upgrading/upgrading-0.5-0.6.html :
If you have previously deployed cert-manager v0.5 using the Helm installation method, you will now need to perform one extra step before upgrading.
Due to issues with the way Helm handles CRD resources in Helm charts, we have now moved the installation of these resources into a separate YAML manifest that must be installed with kubectl apply before upgrading the chart.
These instructions seem to be documented in https://docs.cert-manager.io/en/latest/tasks/upgrading/index.html#upgrading-with-helm as well.a
Also supporting upgrades
We also are going to need to support upgrading cert manager so that people running older versions can upgrade. If they can't upgrade then they will end up being blocked with no real way to fix the problem without lots of manual effort.