apiVersion: networking.gke.io/v1 kind: ManagedCertificate metadata: name: policy-bot-cert spec: domains: - policy-bot.${domain}