diff --git a/infra/configs/openbao-cert.yaml b/infra/configs/openbao-cert.yaml
new file mode 100644
index 0000000..41a4ad2
--- /dev/null
+++ b/infra/configs/openbao-cert.yaml
@@ -0,0 +1,18 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  name: openbao
+  namespace: openbao
+spec:
+  secretName: openbao-lumpiasty-xyz
+
+  dnsNames:
+    - openbao.lumpiasty.xyz
+
+  usages:
+    - digital signature
+    - key encipherment
+
+  issuerRef:
+    name: letsencrypt
+    kind: ClusterIssuer
diff --git a/infra/kustomization.yaml b/infra/kustomization.yaml
index 7fffa68..b38568f 100644
--- a/infra/kustomization.yaml
+++ b/infra/kustomization.yaml
@@ -15,3 +15,4 @@ resources:
   - configs/cluster-issuer.yaml
   - configs/single-hdd-sc.yaml
   - configs/mayastor-snapshotclass.yaml
+  - configs/openbao-cert.yaml