diff --git a/Makefile b/Makefile
index 13c4d4c1..e646d951 100644
--- a/Makefile
+++ b/Makefile
@@ -77,6 +77,14 @@ test: manifests generate fmt vet ## Run tests.
 deploy: manifests ## Deploy controller to the K8s cluster specified in ~/.kube/config.
 	$(KAPP) deploy -a $(KAPP_APP) -n $(KAPP_APP_NAMESPACE) -c -f config/kapp -f <($(KO) resolve --platform $(KO_PLATFORMS) -f config/servicebinding-runtime.yaml)
 
+.PHONY: deploy-cert-manager
+deploy-cert-manager: ## Deploy cert-manager to the K8s cluster specified in ~/.kube/config.
+	$(KAPP) deploy -a cert-manager -n $(KAPP_APP_NAMESPACE) --wait-timeout 5m -c -f https://github.com/cert-manager/cert-manager/releases/download/v1.8.0/cert-manager.yaml
+
+.PHONY: undeploy-cert-manager
+undeploy-cert-manager: ## Undeploy cert-manager from the K8s cluster specified in ~/.kube/config.
+	$(KAPP) delete -a cert-manager -n $(KAPP_APP_NAMESPACE)
+
 .PHONY: undeploy
 undeploy: ## Undeploy controller from the K8s cluster specified in ~/.kube/config.
 	$(KAPP) delete -a $(KAPP_APP) -n $(KAPP_APP_NAMESPACE)
diff --git a/README.md b/README.md
index a6ab1180..3d94d8d7 100644
--- a/README.md
+++ b/README.md
@@ -101,11 +101,13 @@ You’ll need a Kubernetes cluster to run against. You can use [KIND](https://si
    For kind, a registry is not required:
 
    ```sh
-   export KO_DOCKER_REPO=kind.local/servicebinding
+   export KO_DOCKER_REPO=kind.local
    ```
 	
 1. Build and Deploy the controller to the cluster:
 
+   Note: The cluster must have the [cert-manager](https://cert-manager.io) deployed.  There is a `make deploy-cert-manager` target to deploy the cert-manager.
+
    ```sh
    make deploy
    ```