rook/ceph-public-network

certmanager acme challenge dns01 provider

This should be set to match the kubernetes "control plane" network on the nodes