a few highlights:

• a new (disabled by default) certificate controller implementation that allows things like manually triggering renewals
• a kubectl plugin that can be used to manually trigger renewals (big thanks to @JoshVanL for driving this CLI work)
• better openshift support (you can now install via the in-built openshift operatorhub! :clap: to @maartjefor all the work on this :sweat_smile
• 'proper' PKCS#12 & JKS support
• 'installCRDs' option added to the Helm chart
• even faster startup time for the webhook pod, and yet again a simpler startup process :smile: (edit
  https://gitlab.greenpeace.org/gp/git/global-apps/planet4/documentation-and-issues/-/issues/154