diff --git a/src/main/cljc/dda/k8s_keycloak/core.cljc b/src/main/cljc/dda/k8s_keycloak/core.cljc
index c1c0bf8..d32f09e 100644
--- a/src/main/cljc/dda/k8s_keycloak/core.cljc
+++ b/src/main/cljc/dda/k8s_keycloak/core.cljc
@@ -20,8 +20,8 @@
 (defn generate-deployment []
   (yaml/from-string (yaml/load-resource "deployment.yaml")))
 
-(defn generate-cron []
-  (yaml/from-string (yaml/load-resource "cron.yaml")))
+(defn generate-ingress [fqdn string?]
+  (yaml/from-string (yaml/load-resource "ingress.yaml")))
 
 (defn-spec generate any?
   [my-config string?
@@ -29,4 +29,6 @@
   (cs/join "\n" 
            [(yaml/to-string (generate-config my-config my-auth))
             "---"
-            (yaml/to-string (generate-cron))]))
+            (yaml/to-string (generate-ingress))
+            "---"
+            (yaml/to-string (generate-deployment))]))
diff --git a/src/main/resources/certificate.yaml b/src/main/resources/certificate.yaml
new file mode 100644
index 0000000..dd025a2
--- /dev/null
+++ b/src/main/resources/certificate.yaml
@@ -0,0 +1,13 @@
+apiVersion: cert-manager.io/v1alpha2
+kind: Certificate
+metadata:
+  name: keycloak-cert
+  namespace: default
+spec:
+  secretName: keycloak-secret
+  commonName: fqdn
+  dnsNames:
+  - fqdn
+  issuerRef:
+    name: letsencrypt-staging-issuer
+    kind: ClusterIssuer
\ No newline at end of file
diff --git a/src/main/resources/ingress.yml b/src/main/resources/ingress.yaml
similarity index 73%
rename from src/main/resources/ingress.yml
rename to src/main/resources/ingress.yaml
index 342d631..6b4e6d3 100644
--- a/src/main/resources/ingress.yml
+++ b/src/main/resources/ingress.yaml
@@ -1,17 +1,3 @@
-apiVersion: cert-manager.io/v1alpha2
-kind: Certificate
-metadata:
-  name: keycloak-cert
-  namespace: default
-spec:
-  secretName: keycloak-secret
-  commonName: fqdn
-  dnsNames:
-  - fqdn
-  issuerRef:
-    name: letsencrypt-staging-issuer
-    kind: ClusterIssuer
----
 apiVersion: networking.k8s.io/v1beta1
 kind: Ingress
 metadata:
diff --git a/src/test/cljc/dda/k8s_keycloak/core_test.cljc b/src/test/cljc/dda/k8s_keycloak/core_test.cljc
index fc5b16d..18199c3 100644
--- a/src/test/cljc/dda/k8s_keycloak/core_test.cljc
+++ b/src/test/cljc/dda/k8s_keycloak/core_test.cljc
@@ -11,3 +11,42 @@
            :data {:config.edn "some-config-value\n", 
                   :credentials.edn "some-credentials-value\n"}}
           (cut/generate-config "some-config-value\n" "some-credentials-value\n"))))
+
+(deftest should-generate-ingress-yaml-with-default-issuer
+  (is (= {:apiVersion "networking.k8s.io/v1beta1"
+           :kind "Ingress"
+           :metadata
+           {:name "ingress-cloud"
+            :annotations
+            {:cert-manager.io/cluster-issuer "letsencrypt-staging-issuer"
+             :nginx.ingress.kubernetes.io/proxy-body-size "256m"
+             :nginx.ingress.kubernetes.io/ssl-redirect "true"
+             :nginx.ingress.kubernetes.io/rewrite-target "/"
+             :nginx.ingress.kubernetes.io/proxy-connect-timeout "300"
+             :nginx.ingress.kubernetes.io/proxy-send-timeout "300"
+             :nginx.ingress.kubernetes.io/proxy-read-timeout "300"}
+            :namespace "default"}
+           :spec
+           {:tls ({:hosts ("test.de"), :secretName "keycloak-secret"})
+            :rules ({:host "test.de", :http {:paths ({:backend {:serviceName "keycloak", :servicePort 8080}})}})}}
+          (cut/generate-ingress {:fqdn "test.de"}))))
+
+(deftest should-generate-ingress-yaml-with-prod-issuer
+  (is (= {:apiVersion "networking.k8s.io/v1beta1"
+          :kind "Ingress"
+          :metadata
+          {:name "ingress-cloud"
+           :annotations
+           {:cert-manager.io/cluster-issuer "letsencrypt-prod-issuer"
+            :nginx.ingress.kubernetes.io/proxy-body-size "256m"
+            :nginx.ingress.kubernetes.io/ssl-redirect "true"
+            :nginx.ingress.kubernetes.io/rewrite-target "/"
+            :nginx.ingress.kubernetes.io/proxy-connect-timeout "300"
+            :nginx.ingress.kubernetes.io/proxy-send-timeout "300"
+            :nginx.ingress.kubernetes.io/proxy-read-timeout "300"}
+           :namespace "default"}
+          :spec
+          {:tls ({:hosts ("test.de"), :secretName "keycloak-secret"})
+           :rules ({:host "test.de", :http {:paths ({:backend {:serviceName "keycloak", :servicePort 8080}})}})}}
+         (cut/generate-ingress {:fqdn "test.de"
+                                :issuer :prod}))))
\ No newline at end of file