diff --git a/core/installer/values-tmpl/cert-manager.cue b/core/installer/values-tmpl/cert-manager.cue
index 4d1cddd..5e7207c 100644
--- a/core/installer/values-tmpl/cert-manager.cue
+++ b/core/installer/values-tmpl/cert-manager.cue
@@ -9,21 +9,21 @@
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-controller"
-			tag:        "v1.12.17"
+			tag:        "v1.17.4"
 			pullPolicy: "IfNotPresent"
 		}
 		cainjector: {
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-cainjector"
-			tag:        "v1.12.17"
+			tag:        "v1.17.4"
 			pullPolicy: "IfNotPresent"
 		}
 		webhook: {
 			registry:   "quay.io"
 			repository: "jetstack"
 			name:       "cert-manager-webhook"
-			tag:        "v1.12.17"
+			tag:        "v1.17.4"
 			pullPolicy: "IfNotPresent"
 		}
 		dnsChallengeSolver: {
@@ -58,7 +58,10 @@
 			}]
 			values: {
 				fullnameOverride:              "\(global.pcloudEnvName)-cert-manager"
-				installCRDs:                   true
+				crds: {
+                                	enabled: true
+                                        keep: true
+                                }
 				dns01RecursiveNameserversOnly: true
 				dns01RecursiveNameservers:     "1.1.1.1:53,8.8.8.8:53"
 				image: {