{{- if .Values.nbi.enabled -}}
{{- if .Values.certauth.enabled -}}
#######################################################################################
# Copyright ETSI Contributors and Others.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#    http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
# implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#######################################################################################
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: nbi
  namespace: {{ .Release.Namespace }}
spec:
  secretName: nbi-cert
  privateKey:
    rotationPolicy: Always
    algorithm: ECDSA
    size: 256
  duration: "8760h"
  renewBefore: "2208h"
  dnsNames:
  {{- if .Values.nbi.ingress.host }}
    - {{ .Values.nbi.ingress.host }}
  {{- else }}
    - "nbi.{{ .Values.global.hostname }}"
  {{- end }}
  usages:
    - "client auth"
  issuerRef:
    name: ca-issuer
    kind: ClusterIssuer
    group: cert-manager.io
{{- end }}
{{- end }}