Wondering if I can use

cert-manager.io

to generate this and pass through a k8s secret via this flag. Or am I completely wrong and conflating things?