apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: lab-root-ca-issuer
spec:
  ca:
    secretName: lab-root-ca-secret