apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: vault.ducoterra.net
spec:
  secretName: vault-tls-cert
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  commonName: vault.ducoterra.net
  dnsNames:
  - vault.ducoterra.net