CluserIssuer with exsiting root CA

[killroy1971]

I'm learning Kubernetes, and I'm onto the subject of SSL certificates. I already have a self generated root certificate and I'd like to use this with cert-manager's Cluster Issuer function.

If I'm interpreting the documentation correctly, I would have to create a self generated CA first, then replace the secret components with my existing root certificate components.

Is that correct, or is there another...possibly better...method? I'm trying to avoid using let's encrypt as it's currently used in an existing docker-based container deployment and the Small Step ACME utility appears to require the use of their external service which isn't something I want to use for an internal lab build.