Hello @Xipeng Guan @Jiang, I have a question about the issuer for the webhook, it looks like the example given presumes the user uses a self-signed certificate. Would you have an example of when the user has an issued certificate? (Here is the Issuer example in question)

cat <<EOF > test-resources.yaml
apiVersion: v1
kind: Namespace
metadata:
  name: cert-manager-test
---
apiVersion: <http://cert-manager.io/v1|cert-manager.io/v1>
kind: Issuer
metadata:
  name: test-selfsigned
  namespace: cert-manager-test
spec:
  selfSigned: {}
---
apiVersion: <http://cert-manager.io/v1|cert-manager.io/v1>
kind: Certificate
metadata:
  name: selfsigned-cert
  namespace: cert-manager-test
spec:
  dnsNames:
    - <http://example.com|example.com>
  secretName: selfsigned-cert-tls
  issuerRef:
    name: test-selfsigned
EOF