maybe they are forced to be on the cert-manager namespace?

apps/production/cert-manager/kustomization.yaml

@@ -6,6 +6,3 @@ resources:
   - namespace.yaml
   - cert-manager.yaml
   - issuer.yaml
-  - ./certificates/fascinated-cc.yaml
-  - ./certificates/local-fascinated-cc.yaml
-  - ./certificates/mcutils-xyz.yaml

apps/production/traefik/kustomization.yaml

@@ -5,5 +5,8 @@ namespace: traefik
 resources:
   - namespace.yaml
   - traefik.yaml
+  - ./certificates/fascinated-cc.yaml
+  - ./certificates/local-fascinated-cc.yaml
+  - ./certificates/mcutils-xyz.yaml
   #- ./external-services
   # for some stupid fucking reason kustomize doesn't support wildcards or globs?!?!?!??!?