apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: clank
  namespace: cert-manager
spec:
  commonName: kjuulh.app
  secretName: clank-cert
  dnsNames:
    - kjuulh.app
    - "*.kjuulh.app"
  issuerRef:
    name: letsencrypt-issuer
    kind: ClusterIssuer
  secretTemplate:
    annotations:
      reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
      reflector.v1.k8s.emberstack.com/reflection-allowed-namespaces: "kube-system"  # Control destination namespaces
      reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true" # Auto create reflection for matching namespaces
      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: "kube-system" #