{% if stalwart.cert is defined %}
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ taskserv.tls_secret }}
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
spec:
  secretName: {{ taskserv.tls_secret }}
  issuerRef:
    name: {{ taskserv.cluster_issuer }}
    kind: ClusterIssuer
  dnsNames:
    - {{ taskserv.hostname }}
  usages:
    - server auth
    - digital signature
    - key encipherment
{% endif %}