Customer wants to manage their own certificates for the API server and Ingress with CMPv2 protocol. 

Given the fact that cert-manager is planning to support external endpoint certs (such as ingress and API server), cert-manager could be used for this. However, cert-manager issuers don't support CMPv2. 

As a solution, Red Hat proposed the customer the following option : to develop their own issuer (which speaks CMPv2) that can be used with cert-manager. 

Customer has finally decided to invest in their own issuer, which they will develop upstream.
The request to Red Hat is to commit to support such issuer downstream.