apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: db-cluster-client-secret
spec:
  commonName: b503c0e5
  duration: 87600h0m0s
  issuerRef:
    name: selfsigned-cert-issuer
    kind: Issuer
  renewBefore: 720h0m0s
  secretName: db-cluster-client-secret
  subject:
    organizations:
      - PingCAP
  usages:
    - client auth
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: db-pd-cluster-secret
spec:
  commonName: b503c0e5
  dnsNames:
    - db-pd
    - db-pd.tidb123456789
    - db-pd.tidb1234567896.svc
    - db-pd-peer
    - db-pd-peer.tidb123456789
    - db-pd-peer.tidb123456789.svc
    - '*.db-pd-peer'
    - '*.db-pd-peer.tidb123456789'
    - '*.db-pd-peer.tidb123456789.svc'
    - '*.db-pd-peer.tidb123456789.svc'
  duration: 87600h0m0s
  ipAddresses:
    - 127.0.0.1
    - ::1
  issuerRef:
    name: selfsigned-cert-issuer
    kind: Issuer
  renewBefore: 720h0m0s
  secretName: db-pd-cluster-secret
  subject:
    organizations:
      - PingCAP
  usages:
    - server auth
    - client auth
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: db-tidb-client-secret
spec:
  commonName: b503c0e5
  duration: 87600h0m0s
  issuerRef:
    name: selfsigned-cert-issuer
    kind: Issuer
  renewBefore: 720h0m0s
  secretName: db-tidb-client-secret
  subject:
    organizations:
      - PingCAP
  usages:
    - client auth
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: db-tidb-cluster-secret
spec:
  commonName: b503c0e5
  dnsNames:
    - db-tidb
    - db-tidb.tidb123456789
    - db-tidb.tidb123456789.svc
    - db-tidb-peer
    - db-tidb-peer.tidb123456789
    - db-tidb-peer.tidb123456789.svc
    - '*.db-tidb-peer'
    - '*.db-tidb-peer.tidb123456789'
    - '*.db-tidb-peer.tidb123456789.svc'
    - '*.db-tidb-peer.tidb123456789.svc'
  duration: 87600h0m0s
  ipAddresses:
    - 127.0.0.1
    - ::1
  issuerRef:
    name: selfsigned-cert-issuer
    kind: Issuer
  renewBefore: 720h0m0s
  secretName: db-tidb-cluster-secret
  subject:
    organizations:
      - PingCAP
  usages:
    - server auth
    - client auth
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: db-tidb-server-secret
spec:
  dnsNames:
    - db-tidb.tidb123456789
    - db-tidb.tidb123456789.svc
  duration: 87600h0m0s
  issuerRef:
    name: selfsigned-cert-issuer
    kind: Issuer
  renewBefore: 720h0m0s
  secretName: db-tidb-server-secret
  subject:
    organizationalUnits:
      - "TiDB Operator"
    organizations:
      - PingCAP
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: db-tikv-cluster-secret
spec:
  commonName: b503c0e5
  dnsNames:
    - db-tikv
    - db-tikv.tidb123456789
    - db-tikv.tidb123456789.svc
    - db-tikv-peer
    - db-tikv-peer.tidb123456789
    - db-tikv-peer.tidb123456789.svc
    - '*.db-tikv-peer'
    - '*.db-tikv-peer.tidb123456789'
    - '*.db-tikv-peer.tidb123456789.svc'
    - '*.db-tikv-peer.tidb123456789.svc'
  duration: 87600h0m0s
  ipAddresses:
    - 127.0.0.1
    - ::1
  issuerRef:
    name: selfsigned-cert-issuer
    kind: Issuer
  renewBefore: 720h0m0s
  secretName: db-tikv-cluster-secret
  subject:
    organizations:
      - PingCAP
  usages:
    - server auth
    - client auth