apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ingress-read-controller-cert
  namespace: kube-system
  annotations:
    cert-manager.io/issue-temporary-certificate: "true"
spec:
  secretName: ingress-read-controller
  duration: 2160h 
  renewBefore: 720h
  commonName: www.ds.ap-southeast-5.alicloud.observability.tidbcloud.com
  privateKey:
    size: 4096
  dnsNames:
  - www.ds.ap-southeast-5.alicloud.observability.tidbcloud.com
  issuerRef:
    name: letsencrypt-for-o11y-ds
    kind: ClusterIssuer