diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..11e50a2
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+tmp/build-errors.log
diff --git a/base/issuer.k b/base/issuer.k
new file mode 100644
index 0000000..59e5293
--- /dev/null
+++ b/base/issuer.k
@@ -0,0 +1,25 @@
+import cert_manager.v1
+
+issuer = v1.Issuer {
+    apiVersion = "cert-manager.io/v1"
+    kind = "Issuer"
+    metadata = {
+        name = "letsencrypt"
+    }
+    spec = {
+        acme = {
+            email = "suyiiyii@gmail.com"
+            server = "https://acme-v02.api.letsencrypt.org/directory"
+            privateKeySecretRef = {
+                name = "letsencrypt"
+            }
+            solvers = [{
+                http01 = {
+                    ingress = {
+                        class = "traefik"
+                    }
+                }
+            }]
+        }
+    }
+}
diff --git a/kcl.mod b/kcl.mod
index 9e5629f..49d87fd 100644
--- a/kcl.mod
+++ b/kcl.mod
@@ -5,3 +5,4 @@ version = "0.0.1"
 
 [dependencies]
 k8s = "1.31.2"
+cert-manager = "0.3.0"
diff --git a/kcl.mod.lock b/kcl.mod.lock
index 3221be8..c0d8f65 100644
--- a/kcl.mod.lock
+++ b/kcl.mod.lock
@@ -1,4 +1,12 @@
 [dependencies]
+  [dependencies.cert-manager]
+    name = "cert-manager"
+    full_name = "cert-manager_0.3.0"
+    version = "0.3.0"
+    sum = "yyuUXsyOsHOGUK3e9P6GzM5A0hcSpW1XBd5O6TLhyvE="
+    reg = "ghcr.io"
+    repo = "kcl-lang/cert-manager"
+    oci_tag = "0.3.0"
   [dependencies.k8s]
     name = "k8s"
     full_name = "k8s_1.31.2"
diff --git a/main.k b/main.k
index 516ee85..082b45a 100644
--- a/main.k
+++ b/main.k
@@ -37,4 +37,4 @@ ingresses = [base.httpServiceRender(http)]
 
 env_manifests = [base.envSecretRender(a) for a in base.Envs.instances()]
 # base.appRender(a)
-manifests.yaml_stream([apps_manifests, env_manifests, ingresses])
+manifests.yaml_stream([apps_manifests, env_manifests, ingresses,base.issuer])
diff --git a/tmp/build-errors.log b/tmp/build-errors.log
deleted file mode 100644
index 6f61b86..0000000
--- a/tmp/build-errors.log
+++ /dev/null
@@ -1 +0,0 @@
-exit status 1exit status 2exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1exit status 1
\ No newline at end of file