From 394a77ed5865b1a9946ac27452d21e3928c1c6f1 Mon Sep 17 00:00:00 2001
From: Giovanni Ferri <giovanni@syscode.uk>
Date: Fri, 25 Sep 2026 14:39:05 +0100
Subject: [PATCH] fix(unraid): keep cert-manager off Imp runner

---
 values/clusters/unraid-lab/cert-manager.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 values/clusters/unraid-lab/cert-manager.yaml

diff --git a/values/clusters/unraid-lab/cert-manager.yaml b/values/clusters/unraid-lab/cert-manager.yaml
new file mode 100644
index 0000000..56f8003
--- /dev/null
+++ b/values/clusters/unraid-lab/cert-manager.yaml
@@ -0,0 +1,14 @@
+# Keep cert-manager off the Imp runner. It may use a control-plane node.
+tolerations: &control_plane_toleration
+  - key: node-role.kubernetes.io/control-plane
+    operator: Exists
+    effect: NoSchedule
+
+webhook:
+  tolerations: *control_plane_toleration
+
+cainjector:
+  tolerations: *control_plane_toleration
+
+startupapicheck:
+  tolerations: *control_plane_toleration