--- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: "${SECRET_CLUSTER_DOMAIN_CERT}" namespace: networking spec: secretName: "${SECRET_CLUSTER_DOMAIN_CERT}-tls" issuerRef: name: letsencrypt-production kind: ClusterIssuer commonName: "${SECRET_CLUSTER_DOMAIN}" dnsNames: - "${SECRET_CLUSTER_DOMAIN}" - "*.${SECRET_CLUSTER_DOMAIN}"