The patch add the annotation `checksum/secret-<name of the TLS secret>` with the
sha512 value of the secret. This ensures a rolling update if the TLS secrets has
been updated. Such an update can be triggered by the cert-manager.
The following patch enables you to generate certificates using cert-manager or,
alternatively, to mount a secret with TLS certificates.
The HTTP server is then automatically configured to use the TLS certificates to
encrypt HTTP traffic.
If an ingress controller is also used, such as the nginx-ingress controller, the
necessary annotations must still be set to inform the nginx-ingress controller
that the HTTP upstream server communicates via HTTPS.
