apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ tls_secret }}
  namespace: {{ taskserv.namespace }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
spec:
  secretName: {{ tls_secret }}
  issuerRef:
    name: {{ taskserv.cluster_issuer }}
    kind: ClusterIssuer
  dnsNames:
    - "{{ taskserv.domain }}"
{% for extra in taskserv.domains_extra %}
    - "{{ extra }}"
{% endfor %}
  usages:
    - server auth
    - digital signature
    - key encipherment