diff --git a/clusters/cherry/apps/clusterissuer.yaml b/clusters/cherry/apps/clusterissuer.yaml
new file mode 100644
index 0000000..a3ecd55
--- /dev/null
+++ b/clusters/cherry/apps/clusterissuer.yaml
@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: cherry-clusterissuer
+  namespace: argocd
+spec:
+  project: infrastructure
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - CreateNamespace=true
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: default
+  source:
+    path: clusters/cherry/manifests/clusterissuer.yaml
+    repoURL: https://github.com/vojtechmares/gitops.git
+    targetRevision: HEAD
diff --git a/clusters/cherry/manifests/clusterissuer/clusterissuer.yaml b/clusters/cherry/manifests/clusterissuer/clusterissuer.yaml
new file mode 100644
index 0000000..eee634e
--- /dev/null
+++ b/clusters/cherry/manifests/clusterissuer/clusterissuer.yaml
@@ -0,0 +1,14 @@
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: letsencrypt-prod
+spec:
+  acme:
+    email: nobody@mareshq.com
+    server: https://acme-v02.api.letsencrypt.org/directory
+    privateKeySecretRef:
+      name: letsencrypt-prod
+    solvers:
+      - http01:
+          ingress:
+            class: nginx