diff --git a/infrastructure/cert-manager/certificate.yaml b/infrastructure/cert-manager/certificate.yaml
index 7eef661..f2b6cc6 100644
--- a/infrastructure/cert-manager/certificate.yaml
+++ b/infrastructure/cert-manager/certificate.yaml
@@ -12,3 +12,9 @@ spec:
   issuerRef:
     name: letsencrypt-issuer
     kind: ClusterIssuer
+  secretTemplate:
+    annotations:
+      reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
+      reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces: "kube-system"  # Control destination namespaces
+      reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true" # Auto create reflection for matching namespaces
+      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: "kube-system" #