apiVersion: v1 kind: Secret metadata: name: fancy-dns-tls namespace: dns type: kubernetes.io/tls # Replace with a real cert-manager managed secret in production: # cert-manager.io/v1 -> Certificate -> CertificateRequest -> Secret stringData: tls.crt: "" tls.key: ""