diff --git a/bin/migrate.sh b/bin/migrate.sh
new file mode 100755
index 0000000..617cf43
--- /dev/null
+++ b/bin/migrate.sh
@@ -0,0 +1,3 @@
+#kubectl get all,cm,secret,ing,role,clusterrole,rolebindings,clusterrolebindings -l app.kubernetes.io/managed-by=Helm -l app.kubernetes.io/instance=cert-manager -A --no-headers --output  custom-columns="POD-NAME":.kind,"NAMESPACE":.metadata.name | while read -r var1 var2; do kubectl annotate $var1 $var2 "meta.helm.sh/release-namespace"="cert-manager" "meta.helm.sh/release-name"="cert-manager" --overwrite; done
+
+kubectl get ValidatingWebhookConfiguration,all,cm,secret,ing,role,clusterrole,rolebindings,clusterrolebindings,MutatingWebhookConfiguration -l app.kubernetes.io/managed-by=Helm -l app.kubernetes.io/instance=cert-manager -A --no-headers --output  custom-columns="POD-NAME":.kind,"NAMESPACE":.metadata.name,"ns":.metadata.namespace | while read -r var1 var2 var3; do kubectl annotate $var1 $var2 -n $var3 "meta.helm.sh/release-namespace"="cert-manager" "meta.helm.sh/release-name"="cert-manager"; done
diff --git a/helmfile.yaml b/helmfile.yaml
index edf0fea..eb27dc7 100644
--- a/helmfile.yaml
+++ b/helmfile.yaml
@@ -11,5 +11,10 @@ releases:
     namespace: kube-system
     createNamespace: false
 
+  - <<: *cert-manager 
+    installed: true
+    namespace: cert-manager
+    createNamespace: false
+
 helmfiles:
   - path: {{.Environment.Name }}/helmfile.yaml
diff --git a/releases.yaml b/releases.yaml
index 98d2dd1..0f511a6 100644
--- a/releases.yaml
+++ b/releases.yaml
@@ -30,6 +30,13 @@ templates:
     values:
       - common/values.{{ .Release.Name }}.yaml
 
+  cert-manager: &cert-manager
+    name: cert-manager
+    chart: jetstack/cert-manager
+    version: 1.10.1
+    inherit: 
+      - template: crd-management-hook
+
   openvpn: &openvpn
     name: openvpn
     chart: allanger-charts/openvpn
diff --git a/repositories.yaml b/repositories.yaml
index 7b5917e..0214adc 100644
--- a/repositories.yaml
+++ b/repositories.yaml
@@ -4,3 +4,6 @@ repositories:
     url: https://kubernetes-sigs.github.io/metrics-server/
   - name: allanger-charts
     url: https://allanger.github.io/allanger-charts
+  - name: jetstack
+    url: https://charts.jetstack.io
+