aws-load-balancer-controller chart is reporting changes each time helm diff is called

[marcusschiesser]

Describe the bug
I am installing the load-balancer controller with helmfile. This tool is periodically calling helm diff to check whether changes need to be synced.

Unfortunately, the aws-load-balancer-controller chart is reporting changes in the webhook certificates each time this helm diff command is called:

helm diff upgrade --allow-unreleased aws-load-balancer-controller eks-charts/aws-load-balancer-controller --version 1.4.0 --namespace kube-system --values ./helmfile.d/infrastructure/aws-load-balancer-controller/values.yml --detailed-exitcode --color --reset-values

This leads to helmfile calling helm upgrade --install for the aws-load-balancer-controller chart.

Steps to reproduce

1. Install aws-load-balancer-controller chart
2. Run helm diff command from above

(helmfile not needed)

Expected outcome
helm diff should not report any differences

Environment

• Chart name: eks-charts/aws-load-balancer-controller
• Chart version: 1.4.0
• Kubernetes version: 1.22
• Using EKS (yes/no), if so version? yes

Additional context
helmfile doc

[Poulpatine]

You can workaround this issue by using enableCertManager: true (if you have installed cert-manager before).