apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: gateway-letsencrypt-cert
spec:
  secretName: gateway-letsencrypt-secret
  duration: 2160h # 90d
  renewBefore: 720h # 30d
  privateKey:
    algorithm: ECDSA
    size: 256
  issuerRef:
    name: letsencrypt
    kind: ClusterIssuer
  secretTemplate:
    annotations: