Comes under "How to pass trust stores in resource YAML when specifying external services?" as discussed in the cert-manager biweekly meeting
We often refer to external services in our CRDs. How do users configure the TLS trust bundle to use for those services?
Example modified from cert-manager ACMEDNS docs:
apiVersion: cert-manager.io/v1