helm-external-secrets/docs/snippets/azkv-pushsecret-certificate-cert-manager.yaml

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: dummy-certificate
spec:
  dnsNames:
    - dummy.local
  issuerRef:
    group: cert-manager.io
    kind: ClusterIssuer
    name: letsencrypt-prod
  secretName: source-certificate
  privateKey:
    encoding: PKCS8 # Must be PKCS8 for Azure Key Vault
    algorithm: RSA
    size: 2048