{{- $root := . }}
{{- with .Values.server.config.upstreamAuthority.disk }}
{{- if and (eq (.enabled | toString) "true") (eq (.secret.create | toString) "true") }}
apiVersion: v1
kind: Secret
metadata:
  name: {{ include "spire.server-upstream-ca-secret" $root }}
  namespace: {{ $root.Release.Namespace }}
  labels:
    {{- include "spire.server.labels" $root | nindent 4 }}
data:
  {{- with .secret.data }}
  tls.crt: {{ .certificate | b64enc }}
  tls.key: {{ .key | b64enc }}
  {{- if ne .bundle ""}}
  bundle.crt: {{ .bundle | b64enc }}
  {{- end }}
  {{- end }}
{{- end }}
{{- end }}