diff --git a/.holo/sources/civic-cloud.toml b/.holo/sources/civic-cloud.toml
index c8ffb0e..87a425c 100644
--- a/.holo/sources/civic-cloud.toml
+++ b/.holo/sources/civic-cloud.toml
@@ -1,3 +1,3 @@
 [holosource]
 url = "https://github.com/civic-cloud/cluster-template"
-ref = "refs/tags/v1.8.0"
+ref = "refs/tags/v1.9.0"
diff --git a/cert-manager/helm-values.yaml b/cert-manager/helm-values.yaml
deleted file mode 100644
index 7a3e45f..0000000
--- a/cert-manager/helm-values.yaml
+++ /dev/null
@@ -1,12 +0,0 @@
-# Overrides the stale helm-values.yaml pulled from cert-manager's source.
-# Upstream cert-manager keeps `ingressShim.resources` and `webhook.enabled`
-# in deploy/manifests/helm-values.yaml, but the chart schema in v1.20+ no
-# longer accepts those keys — they fail validation.
-# This file mirrors the still-valid bits.
-
-fullnameOverride: cert-manager
-
-resources:
-  requests:
-    cpu: 10m
-    memory: 32Mi