Hm, In the helm chart, I didn't configure anything specific about CA as far as I remember, namely I didn't enable the

singleCA

part. I assumed that the default would be a self-signed certificate.