apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: certificate-by-edgeissuer namespace: default spec: commonName: certificate-by-edgeissuer.edge.ncr.com duration: 4380h0m0s # 6 months validity issuerRef: name: edgeissuer-sample kind: EdgeIssuer group: edge-issuer.edge.ncr.com privateKey: algorithm: ECDSA size: 256 renewBefore: 2190h0m0s # Renew 3 months before expiry secretName: certificate-by-edgeissuer