diff --git a/charts/internal/cert-management-garden-runtime/templates/vpa.yaml b/charts/internal/cert-management-garden-runtime/templates/vpa.yaml
index 8ac1c29f..ba1f4c9d 100644
--- a/charts/internal/cert-management-garden-runtime/templates/vpa.yaml
+++ b/charts/internal/cert-management-garden-runtime/templates/vpa.yaml
@@ -15,6 +15,7 @@ spec:
     containerPolicies:
       - containerName: '*'
         controlledValues: RequestsOnly
+        controlledResources: [memory]
         minAllowed:
           memory: {{ .Values.vpa.minAllowed.memory }}
 {{- end }}
diff --git a/charts/internal/cert-management-garden-runtime/values.yaml b/charts/internal/cert-management-garden-runtime/values.yaml
index dfae0df1..0d33d357 100644
--- a/charts/internal/cert-management-garden-runtime/values.yaml
+++ b/charts/internal/cert-management-garden-runtime/values.yaml
@@ -27,6 +27,9 @@ dnsChallengeOnShoot:
   enabled: false
 deployOnGardenRuntime: true
 
+defaultIssuer:
+  name: garden
+
 configuration:
   # propagationTimeout: 60s # TTL for DNS01 challenges
   serverPortHttp: 10258
@@ -74,4 +77,11 @@ issuers:
     #   - my.domain.com
     #   exclude:
     #   - private.my.domain.com
-# requestsPerDayQuota: 10
\ No newline at end of file
+# requestsPerDayQuota: 10
+
+vpa:
+  enabled: true
+  minAllowed:
+    memory: 20Mi
+  updatePolicy:
+    updateMode: "Auto"