apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: tower-tls
  labels:
    {{- include "tower.labels" . | nindent 4 }}
spec:
  secretName: tower-tls
  issuerRef:
    name: {{ .Values.ingress.certIssuer }}
    kind: ClusterIssuer
  dnsNames:
    - {{ .Values.ingress.domain | quote }}
  renewBefore: 720h