{{- if and .Values.certManager.enabled .Values.certManager.createClusterIssuer }}
{{- $solverClass := .Values.certManager.solverIngressClassName | default "nginx" }}
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: {{ .Values.certManager.issuerName }}
  labels:
    {{- include "lab.labels" . | nindent 4 }}
spec:
  acme:
    email: {{ required "certManager.email is required when createClusterIssuer=true" .Values.certManager.email | quote }}
    server: {{ .Values.certManager.server | quote }}
    privateKeySecretRef:
      name: {{ printf "%s-account-key" .Values.certManager.issuerName }}
    solvers:
      - http01:
          ingress:
            {{- if $solverClass }}
            ingressClassName: {{ $solverClass }}
            {{- end }}
---
{{- if .Values.certManager.createStagingIssuer }}
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: {{ .Values.certManager.stagingIssuerName }}
  labels:
    {{- include "lab.labels" . | nindent 4 }}
spec:
  acme:
    email: {{ .Values.certManager.email | quote }}
    server: {{ .Values.certManager.stagingServer | quote }}
    privateKeySecretRef:
      name: {{ printf "%s-account-key" .Values.certManager.stagingIssuerName }}
    solvers:
      - http01:
          ingress:
            {{- if $solverClass }}
            ingressClassName: {{ $solverClass }}
            {{- end }}
{{- end }}
{{- end }}