Adding cluster-issuer annotation for TLS provisioning