Use helm_apply and misc fixes

charts/cert-manager/cluster-issuer.yaml

@@ -2,7 +2,6 @@ apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-production
-  namespace: kube-system
 spec:
   acme:
     # The ACME server URL
@@ -22,7 +21,6 @@ apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: ca-issuer
-  namespace: kube-system
 spec:
   ca:
     secretName: cluster-ca
@@ -31,7 +29,6 @@ apiVersion: cert-manager.io/v1alpha2
 kind: ClusterIssuer
 metadata:
   name: selfsigning-issuer
-  namespace: kube-system
 spec:
   selfSigned: {}