---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ${SECRET_CLUSTER_DOMAIN/./-}
  namespace: networking
spec:
  secretName: ${SECRET_CLUSTER_DOMAIN/./-}-tls
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
  commonName: "${SECRET_CLUSTER_DOMAIN}"
  dnsNames:
    - ${SECRET_CLUSTER_DOMAIN}
    - "*.${SECRET_CLUSTER_DOMAIN}"