cluster/kube: ceph dashboard tls certificates
diff --git a/cluster/kube/cluster.jsonnet b/cluster/kube/cluster.jsonnet
index b49f01a..4ee3d8f 100644
--- a/cluster/kube/cluster.jsonnet
+++ b/cluster/kube/cluster.jsonnet
@@ -63,6 +63,18 @@
     // Main nginx Ingress Controller
     nginx: nginx.Environment {},
     certmanager: certmanager.Environment {},
+    issuer: certmanager.ClusterIssuer("letsencrypt-prod") {
+        spec: {
+            acme: {
+                server: "https://acme-v02.api.letsencrypt.org/directory",
+                email: "bofh@hackerspace.pl",
+                privateKeySecretRef: {
+                    name: "letsencrypt-prod"
+                },
+                http01: {},
+            },
+        },
+    },
 
     // Rook Ceph storage
     rook: rook.Operator {},