apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: ca-root-issuer spec: selfSigned: {}