https://cert-manager.io/
Make sure you read through the webhook sub-application.
webhook
A kustomize base for cert-manager