To anyone wondering how to generate a CA certificate using Pulumi (e.g. to configure a cert-manager CA issuer), here’s an example: https://gist.github.com/EronWright/81d0d016f4fb766074d59e863f132c67