apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: local-ca-issuer spec: ca: secretName: local-ca-key-pair