spire-server:
  upstreamAuthority:
    certManager:
      enabled: true
      issuer_name: "demo-ca"