...
- Cert-Manager's CertificateRequest CRD
- New Issuer CRD
External provider notices that CertificateRequest CRD was created and that it has an reference to New Issuer CRD and processes CSR stored there and in result puts signed certificate and trusted certs. Simple as that.
Future
CertService API enhancements
...