Adjust cert-manager so the root crt/key can be passed in.

@@ -10,18 +10,41 @@ environments:
             enabled: true
             email: name@example.com
             tls_key: replace-me
+        root-ca:
+          crt: null
+          key: null
+        version:
+          raw: 1.1.0
 
 repositories:
   - name: jetstack
     url: https://charts.jetstack.io
+  - name: bedag
+    url: https://bedag.github.io/helm-charts/
 
 ---
 releases:
   - name: cert-manager
     chart: jetstack/cert-manager
     namespace: cert-manager
+    dependencies:
+      - chart: bedag/raw
+        alias: root-ca
+        version: {{ $.Values.version.raw }}
     values:
       - installCRDs: true
+      - root-ca:
+          resources:
+            - apiVersion: v1
+              kind: Secret
+              metadata:
+                name: root-ca
+                namespace: cert-manager
+              data:
+                tls.crt: {{ .Values | get "root-ca.crt" }}
+                tls.key: {{ .Values | get "root-ca.key" }}
+                ca.crt: {{ .Values | get "root-ca.crt" }}
+                ca.key: {{ .Values | get "root-ca.key" }}
 
   - name: cluster-issuer
     chart: charts/cluster-issuer