apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: brunner-ninja
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  secretName: brunner-ninja-tls
  issuerRef:
    name: letsencrypt-dns
    kind: ClusterIssuer
  dnsNames:
    - brunner.ninja
    - "*.brunner.ninja"
  privateKey:
    rotationPolicy: Always
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: watschn-studio
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "1"
    # Preserve the last valid certificate, but don't let its non-renewable
    # challenge block cert-manager or app-of-apps reconciliation.
    argocd.argoproj.io/ignore-healthcheck: "true"
spec:
  secretName: watschn-studio-tls
  issuerRef:
    name: letsencrypt-dns
    kind: ClusterIssuer
  dnsNames:
    - watschn.studio
  privateKey:
    rotationPolicy: Always
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: brgkepler-com
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  secretName: brgkepler-com-tls
  issuerRef:
    name: letsencrypt-http
    kind: ClusterIssuer
  dnsNames:
    - brgkepler.com
  privateKey:
    rotationPolicy: Always
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: gschissenes-equipment
  namespace: default
  annotations:
    argocd.argoproj.io/sync-wave: "1"
spec:
  secretName: gschissenes-equipment-tls
  issuerRef:
    name: letsencrypt-http
    kind: ClusterIssuer
  dnsNames:
    - gschissenes.equipment
  privateKey:
    rotationPolicy: Always