AUTH_APPROVED_DOMAINS
certmanager.k8s.io/cluster-issuer
Also add `networking.k8s.io` to `apiGroups` in `ClusterRole`
Ingress