# Certificate Authority to be used to generate certificates for Dex # By cert-manager in the Target-cluster. Also this CA will be used by API server apiVersion: v1 kind: Secret metadata: name: dex-apiserver-secret labels: clusterctl.cluster.x-k8s.io/move: "true" type: kubernetes.io/tls data: tls.crt: "target-cluster-ca certificate will be copied by replacement transformer" tls.key: "target-cluster-ca certificate key will be copied by replacement transformer"