# Replace with ACME/Let's Encrypt or private CA issuer matching your cluster.
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: selfsigned-bootstrap
spec:
  selfSigned: {}