---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ${SECRET_EXTERNAL_DOMAIN//./-}
  namespace: network
spec:
  secretName: ${SECRET_EXTERNAL_DOMAIN//./-}-tls
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer
  commonName: "${SECRET_EXTERNAL_DOMAIN}"
  dnsNames:
    - ${SECRET_EXTERNAL_DOMAIN}
    - "*.${SECRET_EXTERNAL_DOMAIN}"