apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ taskserv.tenant }}-tls
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/instance: {{ taskserv.tenant }}
    app.kubernetes.io/managed-by: provisioning
spec:
  secretName: {{ taskserv.tenant }}-tls
  issuerRef:
    name: {{ taskserv.cluster_issuer }}
    kind: ClusterIssuer
  dnsNames:
    - "{{ taskserv.domain }}"