apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-app-cert spec: secretName: my-tls-cert issuerRef: name: letsencrypt-prod kind: ClusterIssuer dnsNames: - myapp.example.com