{% for site in taskserv.sites %}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ taskserv.name }}-{{ site.domain | replace(from=".", to="-") }}-tls
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
spec:
  secretName: {{ taskserv.name }}-{{ site.domain | replace(from=".", to="-") }}-tls
  issuerRef:
    name: {{ site.cluster_issuer }}
    kind: ClusterIssuer
  dnsNames:
    - "{{ site.domain }}"
  usages:
    - server auth
    - digital signature
    - key encipherment
{% endfor %}