{{- if .Values.tls.enabled }}
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: openbao-selfsigned
spec:
  selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ .Values.tls.secretName }}
  namespace: {{ .Release.Namespace }}
spec:
  secretName: {{ .Values.tls.secretName }}
  duration: {{ .Values.tls.duration }}
  renewBefore: {{ .Values.tls.renewBefore }}
  issuerRef:
    name: openbao-selfsigned
    kind: ClusterIssuer
  dnsNames:
    - {{ include "openbao-gitops.openbaoFullname" . }}
    - {{ include "openbao-gitops.openbaoFullname" . }}.{{ .Release.Namespace }}
    - {{ include "openbao-gitops.openbaoFullname" . }}.{{ .Release.Namespace }}.svc
    - {{ include "openbao-gitops.openbaoFullname" . }}.{{ .Release.Namespace }}.svc.cluster.local
    - localhost
    {{- range .Values.tls.dnsNames }}
    - {{ . }}
    {{- end }}
  ipAddresses:
    - "127.0.0.1"
    {{- range .Values.tls.ipAddresses }}
    - {{ . | quote }}
    {{- end }}
{{- end }}