[...]
 apiVersion: v1
 data:
   tls.crt: <base64 encoded cert>
   tls.key: <base64 encoded key>
 kind: Secret
 metadata:
   name: mysecret
   namespace: default
 type: Opaque
 [...]