diff --git a/ops/chart/crds/zitadelcluster-crd.yaml b/ops/chart/crds/zitadelcluster-crd.yaml
index 1085a54..8b8c05c 100644
--- a/ops/chart/crds/zitadelcluster-crd.yaml
+++ b/ops/chart/crds/zitadelcluster-crd.yaml
@@ -197,21 +197,6 @@ spec:
                       More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                     type: object
                 type: object
-              rootTLSSecret:
-                description: |-
-                  SecretReference represents a Secret Reference. It has enough information to retrieve secret
-                  in any namespace
-                properties:
-                  name:
-                    description: name is unique within a namespace to reference a
-                      secret resource.
-                    type: string
-                  namespace:
-                    description: namespace defines the space within which the secret
-                      name must be unique.
-                    type: string
-                type: object
-                x-kubernetes-map-type: atomic
               serviceAnnotations:
                 additionalProperties:
                   type: string
@@ -277,7 +262,6 @@ spec:
             - postgresClusterRef
             - purpose
             - resources
-            - rootTLSSecret
             - smtpConfig
             type: object
           status:
diff --git a/src/api/v1alpha1/zitadelcluster_types.go b/src/api/v1alpha1/zitadelcluster_types.go
index 9a41b25..c9feff1 100644
--- a/src/api/v1alpha1/zitadelcluster_types.go
+++ b/src/api/v1alpha1/zitadelcluster_types.go
@@ -82,8 +82,7 @@ type ZitadelClusterSpec struct {
 	ServiceAnnotations map[string]string `json:"serviceAnnotations,omitempty"`
 	// +kubebuilder:default=3
 	// +operator-sdk:csv:customresourcedefinitions:type=spec,xDescriptors={"urn:alm:descriptor:com.tectonic.ui:podCount"}
-	Replicas      int32                  `json:"replicas,omitempty"`
-	RootTLSSecret corev1.SecretReference `json:"rootTLSSecret"`
+	Replicas int32 `json:"replicas,omitempty"`
 }
 
 // ZitadelClusterStatus defines the observed state of ZitadelCluster
diff --git a/src/api/v1alpha1/zz_generated.deepcopy.go b/src/api/v1alpha1/zz_generated.deepcopy.go
index 3995a29..46e6c5e 100644
--- a/src/api/v1alpha1/zz_generated.deepcopy.go
+++ b/src/api/v1alpha1/zz_generated.deepcopy.go
@@ -1089,7 +1089,6 @@ func (in *ZitadelClusterSpec) DeepCopyInto(out *ZitadelClusterSpec) {
 			(*out)[key] = val
 		}
 	}
-	out.RootTLSSecret = in.RootTLSSecret
 }
 
 // DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ZitadelClusterSpec.
diff --git a/src/config/crd/bases/zitadel.topmanage.com_zitadelclusters.yaml b/src/config/crd/bases/zitadel.topmanage.com_zitadelclusters.yaml
index e04b495..9804c7a 100644
--- a/src/config/crd/bases/zitadel.topmanage.com_zitadelclusters.yaml
+++ b/src/config/crd/bases/zitadel.topmanage.com_zitadelclusters.yaml
@@ -198,21 +198,6 @@ spec:
                       More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/
                     type: object
                 type: object
-              rootTLSSecret:
-                description: |-
-                  SecretReference represents a Secret Reference. It has enough information to retrieve secret
-                  in any namespace
-                properties:
-                  name:
-                    description: name is unique within a namespace to reference a
-                      secret resource.
-                    type: string
-                  namespace:
-                    description: namespace defines the space within which the secret
-                      name must be unique.
-                    type: string
-                type: object
-                x-kubernetes-map-type: atomic
               serviceAnnotations:
                 additionalProperties:
                   type: string
@@ -278,7 +263,6 @@ spec:
             - postgresClusterRef
             - purpose
             - resources
-            - rootTLSSecret
             - smtpConfig
             type: object
           status: