cert-manager tolerations

[docent-net]

What would you like to be added:

Ability to specify tolerations for cert-manager -* deployments

Why is this needed:

I have 9 pods in cluster, 3 for control plane and 6 for workloads. I have created this whole cluster without any taints. Afterwards, I have tainted those 6 workers nodes.

Today, I had an outage of one worker node - some workloads were migrated to other nodes. cert-manager pod was running on this failing node. Unfortunately, it couldn't have been migrated, as the cert-manager deployment didn't have any tolerations defined.

From what I can see, the cert-manager deployments templates don't support any tolerations: https://github.com/kubernetes-sigs/kubespray/blob/master/roles/kubernetes-apps/ingress_controller/cert_manager/templates/cert-manager.yml.j2

It looks like an easy fix I could work on, but beforehand wanted to ask whether there's something else going on, why those tolerations are not configurable as it seems like a quite common scenario.