---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: {{ .Values.global.issuerName }}
spec:
  acme:
    email: {{ .Values.global.email | quote }}
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: {{ .Values.global.issuerName }}
    solvers:
      - dns01:
          rfc2136:
            nameserver: {{ .Values.global.rfc2136.nameserver | quote }}
            tsigKeyName: {{ .Values.global.rfc2136.tsigKeyName | quote }}
            tsigAlgorithm: {{ .Values.global.rfc2136.tsigAlgorithm | quote }}
            tsigSecretSecretRef:
              name: {{ .Values.global.rfc2136.tsigSecretName | quote }}
              key: {{ .Values.global.rfc2136.tsigSecretKey | quote }}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ .Values.global.ssl_secret_name }}
  namespace: {{ .Values.global.namespace }}
spec:
  secretName: {{ .Values.global.ssl_secret_name }}
  secretTemplate:
    annotations:
      replicator.v1.mittwald.de/replication-allowed: "true"
      replicator.v1.mittwald.de/replicate-to: "{{ .Values.global.replicatorNamespaces }}"
  issuerRef:
    name: {{ .Values.global.issuerName }}
    kind: ClusterIssuer
  commonName: {{ .Values.global.domain | quote }}
  dnsNames:
    - {{ .Values.global.domain | quote }}
    - "*.{{ .Values.global.domain }}"