ok, so the first problem i had is fexed. realaized i was using

Certificate

instead of

ClusterIssuer

for the kind