bases:
  - ../common/environments.yaml

repositories:
  - name: jetstack
    url: https://charts.jetstack.io

---
releases:
  - name: root-ca
    chart: charts/root-ca
    namespace: cert-manager
    strategicMergePatches:
      - apiVersion: v1
        kind: Secret
        metadata:
          name: root-ca
          namespace: cert-manager
        data:
          tls.crt: {{ .Values | get "root-ca.crt" }}
          tls.key: {{ .Values | get "root-ca.key" }}
          ca.crt: {{ .Values | get "root-ca.crt" }}
          ca.key: {{ .Values | get "root-ca.key" }}

  - name: cert-manager
    chart: jetstack/cert-manager
    namespace: cert-manager
    values:
      - installCRDs: true
        {{- if .Values | get "gatewayAPI" false }}
        extraArgs:
          - "--feature-gates=ExperimentalGatewayAPISupport=true"
        {{- end }}

  - name: cluster-issuer
    chart: charts/cluster-issuer
    disableValidationOnInstall: true
    needs:
      - cert-manager/cert-manager
    jsonPatches:
      {{- if not (empty (.Values.clusterIssuer.jsonPatches)) }}
      {{- .Values.clusterIssuer.jsonPatches | toYaml | indent 6 }}
      {{- end }}
    strategicMergePatches:
      - apiVersion: cert-manager.io/v1
        kind: ClusterIssuer
        metadata:
          name: ca-issuer
          namespace: cert-manager
        spec:
          ca:
            secretName: {{ .Values.clusterIssuer.caIssuer.secretName }}