apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: meta-store-secret
  labels:
    free-tier.tidbcloud.com/issuer: tidb-serverless-issuer
spec:
  secretName:  meta-store-secret
  duration: 8760h0m0s # 365d
  renewBefore: 360h0m0s # 15d
  subject:
    organizations:
      - PingCAP
  commonName: 9d3d456d
  usages: # for client only
    - client auth
  issuerRef:
    group: cert-manager.io
    kind: ClusterIssuer
    name: tidb-serverless-issuer