# Certificates issued by the `sttlab-local-ca` cert-manager ClusterIssuer
# (already present on the cluster). No private key is ever versioned.
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: observability-tls
  namespace: observability
  labels:
    app.kubernetes.io/part-of: observability
spec:
  secretName: observability-tls
  issuerRef:
    name: sttlab-local-ca
    kind: ClusterIssuer
  commonName: grafana.sttlab.local
  dnsNames:
    - grafana.sttlab.local
    - prometheus.sttlab.local
    - alloy.sttlab.local
    - loki.sttlab.local
    - tempo.sttlab.local