{{- if (.Capabilities.APIVersions.Has "cert-manager.io/v1/ClusterIssuer") }}
---
apiVersion: "cert-manager.io/v1"
kind: "ClusterIssuer"
metadata:
  name: "letsencrypt-prod"
spec:
  acme:
    server: "https://acme-v02.api.letsencrypt.org/directory"
    preferredChain: "ISRG Root X1"
    email: {{ .Values.email }}
    privateKeySecretRef:
      name: "letsencrypt-prod"
    solvers:
      - http01:
          ingress:
            ingressTemplate:
              metadata:
                annotations:
                  "ingress.kubernetes.io/ssl-redirect": "false"
                  "nginx.org/redirect-to-https": "false"
                  {{- if not (get .Values.commons.ingress.annotations "traefik.ingress.kubernetes.io/router.entrypoints") }}
                  "traefik.ingress.kubernetes.io/router.entrypoints": "web"
                  {{- end }}
                  {{- with (omit .Values.commons.ingress.annotations "cert-manager.io/cluster-issuer" "cert-manager.io/issuer") }}
                  {{- toYaml . | nindent 18 }}
                  {{- end }}
{{- end }}