{{- if .Values.credential.enabled -}}
apiVersion: windows.k8s.io/v1
kind: GMSACredentialSpec
metadata:
  name: {{ .Values.credential.domainJoinConfig.machineAccountName | lower }}
  labels: {{ include "gmsa.chartref" . | nindent 4 }}
credspec:
  ActiveDirectoryConfig:
    GroupManagedServiceAccounts:
      - Name: {{ .Values.credential.domainJoinConfig.machineAccountNamename }}
        Scope: {{ .Values.credential.domainJoinConfig.netBiosName }}
      - Name: {{ .Values.credential.domainJoinConfig.machineAccountNamename }}
        Scope: {{ .Values.credential.domainJoinConfig.dnsName }}
  CmsPlugins:
    - ActiveDirectory
  DomainJoinConfig:
    DnsName: {{ .Values.credential.domainJoinConfig.dnsName }}
    DnsTreeName:  {{ .Values.credential.domainJoinConfig.dnsName }}
    Guid:  {{ .Values.credential.domainJoinConfig.guid }}
    MachineAccountName:  {{ .Values.credential.domainJoinConfig.machineAccountName }}
    NetBiosName:  {{ .Values.credential.domainJoinConfig.netBiosName }}
    Sid:  {{ .Values.credential.domainJoinConfig.sid }}
{{- end -}}