Installing trust-manager just after installing cert-manager makes it FAIL forever

[luopeien]

To reproduce it, on a k3s (any latest version) clean install:

1. kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.15.3/cert-manager.yaml
2. helm upgrade trust-manager jetstack/trust-manager --install --namespace cert-manager

The #2 will output fail:
Release "trust-manager" does not exist. Installing it now.
Error: failed to create resource: Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/validate?timeout=30s": tls: failed to verify certificate: x509: certificate signed by unknown authority

Then get pods will show:
cert-manager cert-manager-d894bbbd4-cr8s5 1/1 Running 0 87s
cert-manager cert-manager-cainjector-5fd6444f95-7n86t 1/1 Running 0 87s
cert-manager cert-manager-webhook-869674f96f-hqwhd 1/1 Running 0 87s
cert-manager trust-manager-5d65c4dc4f-jhvp9 0/1 Init:0/1 0 16s

That trust-manager pod will stuck in that state forever.

Tried if adding a delay before step 2 (the delay needs to be as long as like 3 minutes), then installation of trust-manager will be successful.