apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
  name: admission-webhook-cert
spec:
  isCA: true
  commonName: $(podDefaultsServiceName).$(podDefaultsNamespace).svc
  dnsNames:
  - $(podDefaultsServiceName).$(podDefaultsNamespace).svc
  - $(podDefaultsServiceName).$(podDefaultsNamespace).svc.cluster.local
  issuerRef:
    kind: ClusterIssuer
    name: $(podDefaultsIssuer)
  secretName: webhook-certs