apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: ns2-tidb-cluster-secret
  namespace: ns2
spec:
  secretName: ns2-tidb-cluster-secret
  duration: 8760h # 365d
  renewBefore: 360h # 15d
  subject:
    organizations:
      - PingCAP
  commonName: "TiDB"
  usages:
    - server auth
    - client auth
  dnsNames:
    - "ns2-tidb"
    - "ns2-tidb.ns2"
    - "ns2-tidb.ns2.svc"
    - "ns2-tidb-peer"
    - "ns2-tidb-peer.ns2"
    - "ns2-tidb-peer.ns2.svc"
    - "*.ns2-tidb-peer"
    - "*.ns2-tidb-peer.ns2"
    - "*.ns2-tidb-peer.ns2.svc"
  ipAddresses:
    - 127.0.0.1
    - ::1
  issuerRef:
    name: ns2-tidb-issuer
    kind: Issuer
    group: cert-manager.io