{% if taskserv.mtls.enabled and taskserv.mtls.cert_manager.enabled %}
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: {{ taskserv.mtls.cert_manager.ca_issuer_name }}
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/managed-by: provisioning
    app.kubernetes.io/component: buildkit-mtls-ca-issuer
spec:
  ca:
    secretName: {{ taskserv.mtls.ca_secret }}
{% endif %}