apiVersion: cert-manager.io/v1alpha2
kind: Issuer
metadata:
name: workload-cluster-ca-issuer
namespace: default
spec:
ca:
secret: dex-apiserver-secret