apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: selfsigned-ca
  namespace: {{ .Release.Namespace }}
  labels:
    app: s3proxy
spec:
  isCA: true
  commonName: s3proxy-selfsigned-ca
  secretName: s3proxy-tls
  privateKey:
    algorithm: ECDSA
    size: 256
  dnsNames:
    - "s3.us-east-1.amazonaws.com"
    - "s3.us-east-2.amazonaws.com"
    - "s3.us-west-1.amazonaws.com"
    - "s3.us-west-2.amazonaws.com"
    - "s3.eu-north-1.amazonaws.com"
    - "s3.eu-south-1.amazonaws.com"
    - "s3.eu-south-2.amazonaws.com"
    - "s3.eu-west-1.amazonaws.com"
    - "s3.eu-west-2.amazonaws.com"
    - "s3.eu-west-3.amazonaws.com"
    - "s3.eu-central-1.amazonaws.com"
    - "s3.eu-central-2.amazonaws.com"
    - "s3.ap-northeast-1.amazonaws.com"
    - "s3.ap-northeast-2.amazonaws.com"
    - "s3.ap-northeast-3.amazonaws.com"
    - "s3.ap-east-1.amazonaws.com"
    - "s3.ap-southeast-1.amazonaws.com"
    - "s3.ap-southeast-2.amazonaws.com"
    - "s3.ap-southeast-3.amazonaws.com"
    - "s3.ap-southeast-4.amazonaws.com"
    - "s3.ap-south-1.amazonaws.com"
    - "s3.ap-south-2.amazonaws.com"
    - "s3.me-south-1.amazonaws.com"
    - "s3.me-central-1.amazonaws.com"
    - "s3.il-central-1.amazonaws.com"
    - "s3.af-south-1.amazonaws.com"
    - "s3.ca-central-1.amazonaws.com"
    - "s3.sa-east-1.amazonaws.com"
  issuerRef:
    name: selfsigned-issuer
    kind: Issuer
    group: cert-manager.io
