try adjusting certificate config

k8s/staging.yml

@@ -45,37 +45,19 @@ spec:
   selector:
     app: signal-service
 ---
-apiVersion: certmanager.k8s.io/v1alpha1
-kind: Certificate
-metadata:
-  name: staging-api-tls
-  namespace: default
-spec:
-  secretName: api-tls
-  issuerRef:
-    name: letsencrypt
-    kind: ClusterIssuer
-  commonName: api.staging.wenglab.org
-  dnsNames:
-  - api.staging.wenglab.org
-  acme:
-    config:
-    - http01:
-        ingress: api-ingress
-      domains:
-      - api.staging.wenglab.org
----
 apiVersion: extensions/v1beta1
 kind: Ingress
 metadata:
   name: api-ingress
   annotations:
     kubernetes.io/ingress.global-static-ip-name: "staging-api-external-ip"
+    cert-manager.io/cluster-issuer: letsencrypt    
+    cert-manager.io/issue-temporary-certificate: "true"
 spec:
   backend:
     serviceName: signal-service-service
     servicePort: 80
   tls:
   - secretName: api-tls
     hosts:
-    - api.staging.wenglab.org
+    - api.staging.wenglab.org