certificates can be secrets in k8s. track certs from there
certificates can be secrets in k8s. track certs from there