spire-server:
  upstreamAuthority:
    certManager:
      enabled: true
      ca:
        create: true