---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: api-certificate
  namespace: openshift-config
spec:
  secretName: api-certificate
  renewBefore: 360h # 15d
  commonName: api.os.fedorainfracloud.org
  dnsNames:
  - 'api.os.fedorainfracloud.org'
  issuerRef:
    name: letsencrypt-production
    kind: ClusterIssuer