cert-manager Manages TLS certificates using Let's Encrypt ClusterIssuer set up for both staging and production Used for Harbor, ArgoCD, and app Ingresses