{% if taskserv.cert is defined %}
{% if taskserv.tls_namespace is defined %}{% set tls_ns = taskserv.tls_namespace %}{% else %}{% set tls_ns = taskserv.namespace %}{% endif %}
{% if taskserv.gateway_namespace is defined %}{% set gw_ns = taskserv.gateway_namespace %}{% else %}{% set gw_ns = "kube-system" %}{% endif %}
{% if tls_ns != gw_ns %}
apiVersion: gateway.networking.k8s.io/v1beta1
kind: ReferenceGrant
metadata:
  name: {{ taskserv.tls_secret }}-from-{{ gw_ns }}
  namespace: {{ tls_ns }}
  labels:
    app.kubernetes.io/name: {{ taskserv.name }}
    app.kubernetes.io/managed-by: provisioning
spec:
  from:
    - group: gateway.networking.k8s.io
      kind: Gateway
      namespace: {{ gw_ns }}
  to:
    - group: ""
      kind: Secret
      name: {{ taskserv.tls_secret }}
{% endif %}
{% endif %}