apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ops-service-cluster-secret
  namespace: tidb-admin
  labels:
    free-tier.tidbcloud.com/issuer: tidb-serverless-issuer
spec:
  secretName: ops-service-cluster-secret
  duration: 8760h0m0s # 365d
  renewBefore: 360h0m0s # 15d
  subject:
    organizations:
      - PingCAP
  commonName: 9d3d456d
  usages:
    - server auth
    - client auth
  dnsNames:
    - '*.ops-service.tidb-admin'
    - '*.ops-service.tidb-admin.svc'
    - '*.ops-service.tidb-admin.svc.cluster.local'
    - 'ops-service.tidb-admin.svc'
    - 'ops-service.tidb-admin.svc.cluster.local'
  ipAddresses:
    - "127.0.0.1"
    - "::1"
  issuerRef:
    group: cert-manager.io
    kind: ClusterIssuer
    name: tidb-serverless-issuer