diff --git a/charts/ratify/Chart.yaml b/charts/ratify/Chart.yaml
index 68427730f..a59adbdb4 100644
--- a/charts/ratify/Chart.yaml
+++ b/charts/ratify/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: ratify
 description: A Helm chart for Ratify
-version: 1.8.0
-appVersion: v1.0.0-rc.6
+version: 1.9.0
+appVersion: v1.0.0-rc.7
 home: https://github.com/deislabs/ratify
diff --git a/charts/ratify/values.yaml b/charts/ratify/values.yaml
index d9057a1c6..706c5dfb7 100644
--- a/charts/ratify/values.yaml
+++ b/charts/ratify/values.yaml
@@ -1,7 +1,7 @@
 image:
   repository: ghcr.io/deislabs/ratify
   crdRepository: ghcr.io/deislabs/ratify-crds
-  tag: v1.0.0-rc.6
+  tag: v1.0.0-rc.7
   pullPolicy: IfNotPresent
 
 nameOverride: ""
diff --git a/helmfile.yaml b/helmfile.yaml
index 9916c055b..bc418468b 100644
--- a/helmfile.yaml
+++ b/helmfile.yaml
@@ -21,7 +21,7 @@ releases:
   - name: ratify
     namespace: gatekeeper-system
     chart: ratify/ratify
-    version: 1.8.0
+    version: 1.9.0
     wait: true
     needs:
       - gatekeeper
@@ -57,6 +57,7 @@ releases:
           - "stores.config.ratify.deislabs.io"
           - "verifiers.config.ratify.deislabs.io"
           - "certificatestores.config.ratify.deislabs.io"
+          - "policies.config.ratify.deislabs.io"
       - events: ["postuninstall"]
         showlogs: true
         command: "kubectl"
@@ -68,4 +69,6 @@ releases:
           - "gatekeeper-system"
     set:
       - name: notationCert
-        value: {{ exec "curl" (list "-sSL" "https://raw.githubusercontent.com/deislabs/ratify/main/test/testdata/notation.crt") | quote }}
\ No newline at end of file
+        value: {{ exec "curl" (list "-sSL" "https://raw.githubusercontent.com/deislabs/ratify/main/test/testdata/notation.crt") | quote }}
+      - name: featureFlags.RATIFY_CERT_ROTATION
+        value: true
\ No newline at end of file
diff --git a/high-availability.helmfile.yaml b/high-availability.helmfile.yaml
index b37ca7219..de682c9a0 100644
--- a/high-availability.helmfile.yaml
+++ b/high-availability.helmfile.yaml
@@ -31,8 +31,8 @@ releases:
         value: false
   - name: ratify
     namespace: gatekeeper-system
-    chart: charts/ratify/
-    version: 1.8.0
+    chart: ratify/ratify
+    version: 1.9.0
     wait: true
     needs:
       - dapr-system/dapr
@@ -74,14 +74,10 @@ releases:
           - "gatekeeper-system"
           - "--ignore-not-found=true"
     set:
-      - name: image.repository
-        value: ghcr.io/deislabs/ratify-dev
-      - name: image.crdRepository
-        value: ghcr.io/deislabs/ratify-crds-dev
-      - name: image.tag
-        value: dev.20230723.d81e305
       - name: featureFlags.RATIFY_EXPERIMENTAL_HIGH_AVAILABILITY
         value: true
+      - name: featureFlags.RATIFY_CERT_ROTATION
+        value: true
       - name: logger.level
         value: debug
       - name: notationCert