{{- if index .Values "cert-manager" "enabled" }}
{{ template "kubezero-app.app" dict "root" . "name" "cert-manager" "type" "helm" "namespace" "cert-manager" }}
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
---
apiVersion: v1
kind: Namespace
metadata:
  name: cert-manager
{{- if index .Values "kiam" "enabled" }}
  annotations:
    iam.amazonaws.com/permitted: ".*CertManagerRole.*"
{{- end }}
{{- end }}