diff --git a/kube/1-bootstrap/flux/flux-system/charts/helm/jetstack.yaml b/kube/1-bootstrap/flux/flux-system/charts/helm/jetstack.yaml
new file mode 100644
index 00000000..d7e64ffc
--- /dev/null
+++ b/kube/1-bootstrap/flux/flux-system/charts/helm/jetstack.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1beta2
+kind: HelmRepository
+metadata:
+  name: jetstack
+  namespace: flux-system
+spec:
+  interval: 1h
+  url: https://charts.jetstack.io/
diff --git a/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml b/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml
index 56e6de69..a7c56142 100644
--- a/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml
+++ b/kube/1-bootstrap/flux/flux-system/charts/helm/kustomization.yaml
@@ -5,3 +5,4 @@ resources:
   - rook-ceph-charts.yaml
   - ingress-nginx.yaml
   - cilium-charts.yaml
+  - jetstack.yaml
diff --git a/kube/3-kube-core/3-certs/kustomization.yaml b/kube/3-kube-core/3-certs/kustomization.yaml
new file mode 100644
index 00000000..6c69d8b4
--- /dev/null
+++ b/kube/3-kube-core/3-certs/kustomization.yaml
@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - 1-namespace.yaml
+  - 2-install.yaml
+  - 3-issuer.yaml
diff --git a/kube/3-kube-core/kustomization.yaml b/kube/3-kube-core/kustomization.yaml
index d6b08ac8..f52c00f0 100644
--- a/kube/3-kube-core/kustomization.yaml
+++ b/kube/3-kube-core/kustomization.yaml
@@ -4,3 +4,4 @@ kind: Kustomization
 resources:
   - 1-networking
   - 2-storage
+  - 3-certs