First stab at helm provider in Terraform: cert-manager
It seemed to be the easiest. Explicitly depend on the namespace name so no race condition there. Only had one variable to set, so drop the values.yaml for it. Already imported the current helm release to Terraform state, so should be good on the plan.