# Leaf Certificate — signed by the CA Issuer.
# The product chart consumes the resulting TLS Secret.
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: sample-tls
  namespace: sample
spec:
  secretName: sample-tls
  duration: 24h
  renewBefore: 12h
  issuerRef:
    name: chart-test-swarm-ca-issuer
    kind: Issuer
  commonName: "sample.sample.svc"
  dnsNames:
    - "sample.sample.svc"
    - "sample.sample.svc.cluster.local"