--- api: servingCertificate: durationSeconds: 2400 renewBeforeSeconds: -10