apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: root-issuer namespace: default spec: selfSigned: {}