apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: remote-access-cert-${banner_id}
spec:
  domains:
  - ${banner_id}.${domain}