apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ site_k8s }}-tls
  namespace: {{ namespace }}
spec:
  secretName: {{ site_k8s }}-tls
  issuerRef:
    name: letsencrypt
    kind: ClusterIssuer
  dnsNames:
  - {{ domain }}
{%- for alias in aliases %}
  - {{ alias }}
{%- endfor %}