{{- if and
  (eq .Values.controller "traefik")
  (not .Values.external)
  (.Values.traefik.hostPath)
}}
---
kind: PersistentVolume
apiVersion: v1
metadata:
  name: {{ .Release.Namespace }}-traefik-certs
  labels:
    type: local
spec:
  storageClassName: manual
  capacity:
    storage: 1Gi
  accessModes:
    - ReadWriteOnce
  claimRef:
    apiVersion: v1
    kind: PersistentVolumeClaim
    name: traefik-certs
    namespace: {{ .Release.Namespace }}
  hostPath:
    path: {{ .Values.traefik.hostPath | quote }}
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: traefik-certs
spec:
  storageClassName: manual
  volumeName: {{ .Release.Namespace }}-traefik-certs
  selector:
  accessModes:
   - ReadWriteOnce
  resources:
    requests:
      storage: 10Mi
{{- end }}