We are testing the SUSE Neuvector product on K3D and it gives us ClusterRole and ClusterRoleBinding issues related to empty CABundle during autoGenerateCert. Is the CABundle not part of the autoGenerateCert? How do we deploy correctly so that we can use Admission Control?