K8 Certificate Authority for Web Applications in Private Domain
There are probably multiple solutions for this, but one is the cert-manager:
https://github.com/jetstack/cert-manager
You can install it and create a CA issuer with your CA. Then you can create certificates using k8s yaml manifests, and the cert-manager takes care of creating the secrets.