# CA Certificate — signed by the self-signed root Issuer above.
# Once Ready, the resulting Secret backs the CA Issuer below.
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: chart-test-swarm-ca
  namespace: sample
spec:
  isCA: true
  secretName: chart-test-swarm-ca-tls
  duration: 720h
  renewBefore: 360h
  issuerRef:
    name: chart-test-swarm-selfsigned-issuer
    kind: Issuer
  commonName: "chart-test-swarm-ca"
  dnsNames:
    - "chart-test-swarm-ca"