apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  labels:
    free-tier.tidbcloud.com/issuer: tidb-serverless-issuer
  name: vmagent-cluster-secret
  namespace: observability
spec:
  commonName: 9d3d456d
  dnsNames:
  - '*.observability'
  - '*.observability.svc'
  - '*.observability.svc.cluster.local'
  - '*.observability.pod.cluster.local'
  duration: 8760h0m0s
  ipAddresses:
  - 127.0.0.1
  - 127.0.0.6
  - ::1
  issuerRef:
    group: cert-manager.io
    kind: ClusterIssuer
    name: tidb-serverless-issuer
  renewBefore: 360h0m0s
  secretName: vmagent-cluster-secret
  subject:
    organizations:
    - PingCAP
  usages:
  - server auth
  - client auth