apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: tidb-worker-cluster-secret
  namespace: tidb-worker
  labels:
    free-tier.tidbcloud.com/issuer: tidb-serverless-issuer
spec:
  secretName: tidb-worker-cluster-secret
  duration: 8760h0m0s # 365d
  renewBefore: 360h0m0s # 15d
  subject:
    organizations:
      - PingCAP
  commonName: 9d3d456d
  usages:
    - server auth
    - client auth
  dnsNames:
    - '*.tidb-worker'
    - '*.tidb-worker.svc'
    - '*.tidb-worker.pod.cluster.local'
  ipAddresses:
    - "127.0.0.1"
    - "127.0.0.6" # For tlsOriginationEnvoyFilter
    - "::1"
  issuerRef:
    group: cert-manager.io
    kind: ClusterIssuer
    name: tidb-serverless-issuer