diff --git a/infra/vultr-kubernetes/backend.tf b/infra/vultr-kubernetes/backend.tf
index f20673d..bd5749a 100644
--- a/infra/vultr-kubernetes/backend.tf
+++ b/infra/vultr-kubernetes/backend.tf
@@ -19,6 +19,10 @@ terraform {
       source  = "hashicorp/kubernetes"
       version = "2.37.1"
     }
+    kubectl = {
+      source = "alekc/kubectl"
+      version = "2.0.0"
+    }
     helm = {
       source  = "hashicorp/helm"
       version = "3.0.2"
@@ -48,6 +52,10 @@ provider kubernetes {
   config_path = "config.yaml"
 }
 
+provider kubectl {
+  config_path = "config.yaml"
+}
+
 provider helm {
   kubernetes = {
     config_path = "config.yaml"
diff --git a/infra/vultr-kubernetes/ingress-controller.tf b/infra/vultr-kubernetes/ingress-controller.tf
index df32d32..6a32a09 100644
--- a/infra/vultr-kubernetes/ingress-controller.tf
+++ b/infra/vultr-kubernetes/ingress-controller.tf
@@ -2,6 +2,6 @@ resource helm_release nginx {
     name        = "ingress-nginx"
     repository  = "https://kubernetes.github.io/ingress-nginx"
     chart       = "ingress-nginx"
-    namespace = "ingress-nginx"
+    namespace   = "ingress-nginx"
     create_namespace = true
 }
\ No newline at end of file
diff --git a/infra/vultr-kubernetes/tls.tf b/infra/vultr-kubernetes/tls.tf
new file mode 100644
index 0000000..74b88d2
--- /dev/null
+++ b/infra/vultr-kubernetes/tls.tf
@@ -0,0 +1,16 @@
+resource helm_release shockrah_cert_manager {
+    name        = "cert-manager"
+    repository = "https://charts.jetstack.io"
+    chart       = "cert-manager"
+    version     = "v1.18.2"
+    namespace   = "cert-manager"
+    create_namespace = true
+    cleanup_on_fail = true
+
+    set = [ 
+        {
+            name = "crds.enabled"
+            value = "true"
+        } 
+    ]
+}
\ No newline at end of file
diff --git a/infra/vultr-kubernetes/variables.tf b/infra/vultr-kubernetes/variables.tf
index 5458d7b..14b6a47 100644
--- a/infra/vultr-kubernetes/variables.tf
+++ b/infra/vultr-kubernetes/variables.tf
@@ -43,6 +43,9 @@ variable playground {
     health = object({
       dns = string
     })
+    tls = object({
+      email = string
+    })
   })
 }
 
diff --git a/infra/vultr-kubernetes/variables.tfvars b/infra/vultr-kubernetes/variables.tfvars
index ff00da4..57142bf 100644
--- a/infra/vultr-kubernetes/variables.tfvars
+++ b/infra/vultr-kubernetes/variables.tfvars
@@ -21,6 +21,9 @@ playground = {
   health = {
     dns = "health"
   }
+  tls = {
+    email = "dev@shockrah.xyz"
+  }
 }
 
 bastion = {
@@ -29,4 +32,3 @@ bastion = {
   os    = "1743"
 }
 
-