{{- define "spire-identity-exchange.cert-manager-default-issuer" }}
{{-   if not .Values.tls.certManager.issuer.acme.email }}
{{-     fail "You must specify an email address via certManager.issuer.acme.email" }}
{{-   end }}
email: {{ .Values.tls.certManager.issuer.acme.email | quote}}
server: {{ .Values.tls.certManager.issuer.acme.server | quote}}
privateKeySecretRef:
  name: {{ include "spire-identity-exchange.fullname" . }}-issuer
solvers:
- http01:
    ingress: {}
{{- end }}
{{- if and .Values.tls.certManager.enabled .Values.tls.certManager.issuer.create (or .Values.tls.rest.enabled .Values.tls.grpc.enabled) }}
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: {{ include "spire-identity-exchange.fullname" . }}
  namespace: {{ include "spire-identity-exchange.namespace" . }}
spec:
  acme:
    {{ mergeOverwrite (include "spire-identity-exchange.cert-manager-default-issuer" . | fromYaml) .Values.tls.certManager.issuer.acme | toYaml | nindent 4 }}
{{- end }}