--- apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: root-tls-cert-issuer spec: selfSigned: {}