apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: api-gateway-mtls-cert
  namespace: customer1
spec:
  secretName: api-gateway-mtls-secret
  duration: 2160h # 90 days
  renewBefore: 360h # 15 days
  commonName: api-gateway.customer1.svc.cluster.local
  dnsNames:
    - api-gateway
    - api-gateway.customer1
    - api-gateway.customer1.svc
    - api-gateway.customer1.svc.cluster.local
  usages:
    - digital signature
    - key encipherment
    - client auth
    - server auth
  issuerRef:
    name: trading-platform-ca-issuer
    kind: Issuer
    group: cert-manager.io