apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: {{ template "landing.name" . }}-tls
  namespace: openshift-ingress
  labels:
    app: {{ template "landing.name" . }}
spec:
  dnsNames:
  - {{ .Values.ingress.host }}
  {{- if .Values.ingress.www.enabled }}
  - www.{{ .Values.ingress.host }}
  {{- end }}
  duration: {{ .Values.certificate.duration | default "2160h" }}
  renewBefore: {{ .Values.certificate.renewBefore | default "720h" }}
  issuerRef:
    kind: ClusterIssuer
    name: {{ .Values.certificate.issuer | default "letsencrypt-prod" }}
  secretName: {{ template "landing.name" . }}-tls