diff --git a/cluster/manifests/freeleaps-monitoring-system/kube-prometheus-stack/values.yaml b/cluster/manifests/freeleaps-monitoring-system/kube-prometheus-stack/values.yaml
index e7fd26ef..bc20c13f 100644
--- a/cluster/manifests/freeleaps-monitoring-system/kube-prometheus-stack/values.yaml
+++ b/cluster/manifests/freeleaps-monitoring-system/kube-prometheus-stack/values.yaml
@@ -2657,15 +2657,15 @@ prometheusOperator:
 
     # Use certmanager to generate webhook certs
     certManager:
-      enabled: false
+      enabled: true
       # self-signed root certificate
       rootCert:
         duration: ""  # default to be 5y
       admissionCert:
         duration: ""  # default to be 1y
-      # issuerRef:
-      #   name: "issuer"
-      #   kind: "ClusterIssuer"
+      issuerRef:
+        name: "mathmast-dot-com"
+        kind: "ClusterIssuer"
 
   ## Namespaces to scope the interaction of the Prometheus Operator and the apiserver (allow list).
   ## This is mutually exclusive with denyNamespaces. Setting this to an empty object will disable the configuration
@@ -2690,7 +2690,7 @@ prometheusOperator:
   ## Without this specified option cluster.peer will have value alertmanager-monitoring-alertmanager-0.alertmanager-operated:9094 (default value)
   ## With this specified option cluster.peer will have value alertmanager-monitoring-alertmanager-0.alertmanager-operated.namespace.svc.cluster-domain:9094
   ##
-  # clusterDomain: "cluster.local"
+  clusterDomain: "freeleaps.cluster"
 
   networkPolicy:
     ## Enable creation of NetworkPolicy resources.