apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: kiam-agent
  namespace: {{ .Release.Namespace }}
  labels:
{{ include "kubezero-lib.labels" . | indent 4 }}
spec:
  secretName: kiam-agent-tls
  issuerRef:
    name: kubezero-local-ca-issuer
    kind: ClusterIssuer
  usages:
  - "any"
  dnsNames:
  - "kiam-agent"
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: kiam-server
  namespace: {{ .Release.Namespace }}
  labels:
{{ include "kubezero-lib.labels" . | indent 4 }}
spec:
  secretName: kiam-server-tls
  issuerRef:
    name: kubezero-local-ca-issuer
    kind: ClusterIssuer
  usages:
  - "any"
  dnsNames:
  - "localhost"
  - "kiam-server"
  ipAddresses:
  - "127.0.0.1"