@@ -1,13 +1,19 @@
 cloudnative-pg:
   crds:
     create: true
-  # Image tag intentionally left to the chart's appVersion (1.28.1). Do NOT pin
-  # image.tag to a version the vendored chart's CRDs don't match: an operator
-  # newer than its CRDs writes status fields the CRD prunes (e.g.
-  # status.instanceID.sessionID, added in CNPG 1.27.3), which makes the operator
-  # believe the instance manager restarted and fail EVERY backup cluster-wide
-  # ("instance manager was restarted during backup"). Bump the chart version in
-  # the Makefile to move the operator + CRDs together.
+  # Pinned to 1.28.2 (same minor as the vendored chart's appVersion 1.28.1) to pick up
+  # the PVC resize-deadlock fix (cloudnative-pg#9980 / #9981), which landed in the operator
+  # binary in 1.28.2 and needs no CRD change. Upstream publishes a chart only per minor
+  # .0/.1, so 1.28.2 has no chart and the fix is unreachable via a chart bump on the 1.28 line.
+  #
+  # A same-minor pin is #3479-safe: an operator newer than its CRDs is dangerous only when
+  # it writes status fields the CRD prunes (e.g. status.instanceID.sessionID, added in CNPG
+  # 1.27.3 over 1.27.1 CRDs). Across the 1.28 patch line the backups CRD schema is unchanged
+  # (only the controller-gen annotation differs) and the clusters CRD only gains additive
+  # spec fields - no new status fields to prune. Any CROSS-minor bump must instead raise the
+  # chart version in the Makefile so the operator and CRDs advance together.
+  image:
+    tag: "1.28.2"
 
 # CloudNativePG Barman Cloud Plugin (github.com/cloudnative-pg/plugin-barman-cloud).
 # Native spec.backup.barmanObjectStore is deprecated in CNPG 1.27 and removed in 1.29,