{{- define "spire-identity-exchange.cert-manager-default-cert" }}
{{-   $fullName := include "spire-identity-exchange.fullname" . }}
dnsNames:
  {{- if ne (len .Values.tls.certManager.certificate.dnsNames) 0 }}
  {{-   toYaml .Values.tls.certManager.certificate.dnsNames | nindent 4 }}
  {{- else }}
  {{-   if .Values.rest.enabled }}
    - {{ include "spire-lib.ingress-calculated-name" (dict "ingress" .Values.rest.ingress "Values" .Values) }}
  {{-   end }}
  {{-   if .Values.grpc.enabled }}
    - {{ include "spire-lib.ingress-calculated-name" (dict "ingress" .Values.grpc.ingress "Values" .Values) }}
  {{-   end }}
  {{- end }}
issuerRef:
  {{- with .Values.tls.certManager.certificate.issuerRef.group }}
  group: {{ . }}
  {{- end }}
  kind: {{ default "Issuer" .Values.tls.certManager.certificate.issuerRef.kind }}
  name: {{ default $fullName .Values.tls.certManager.certificate.issuerRef.name }}
secretName: {{ $fullName }}-cert
{{- end }}
{{- if .Values.tls.certManager.enabled }}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ include "spire-identity-exchange.fullname" . }}
  namespace: {{ include "spire-identity-exchange.namespace" . }}
spec:
  {{ merge (include "spire-identity-exchange.cert-manager-default-cert" . | fromYaml) .Values.tls.certManager.certificate | toYaml | nindent 2 }}
{{- end }}