{% if taskserv.mtls.enabled and taskserv.mtls.cert_manager.enabled %}
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: {{ taskserv.mtls.cert_manager.cluster_issuer_name }}
  labels:
    app.kubernetes.io/managed-by: provisioning
    app.kubernetes.io/component: buildkit-mtls-bootstrap
spec:
  selfSigned: {}
{% endif %}