{% if taskserv.cert is defined %}
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ taskserv.tls_secret }}
  namespace: {% if taskserv.tls_namespace is defined %}{{ taskserv.tls_namespace }}{% else %}{{ taskserv.namespace }}{% endif %}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
spec:
  secretName: {{ taskserv.tls_secret }}
  issuerRef:
    name: {{ taskserv.cluster_issuer }}
    kind: ClusterIssuer
  dnsNames:
{% for hostname in taskserv.tls_hostnames | default(value=[]) %}
    - {{ hostname }}
{% endfor %}
  usages:
    - server auth
    - digital signature
    - key encipherment
{% endif %}