{{- if and (or .Values.agent .Values.hubble.relay.enabled .Values.hubble.ui.enabled) .Values.hubble.enabled .Values.hubble.tls.enabled .Values.hubble.tls.auto.enabled (eq .Values.hubble.tls.auto.method "certmanager") (not .Values.hubble.tls.auto.certManagerIssuerRef) }}
{{- $_ := include "hubble-generate-certs.helm.setup-ca" . -}}
---
apiVersion: v1
kind: Secret
metadata:
  name: hubble-ca-secret
  namespace: {{ .Release.Namespace }}
data:
  ca.crt: {{ .ca.Cert | b64enc }}
  ca.key: {{ .ca.Key  | b64enc }}
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: hubble-issuer
  namespace: {{ .Release.Namespace }}
spec:
  ca:
    secretName: hubble-ca-secret
{{- end }}