questions:
  - variable: tls.source
    label: "Certificate Source"
    type: enum
    default: "generate"
    options: ["generate", "secret"]
    description: "Where to get Certificate"
    group: "global Settings"

  - variable: tls.secretName
    label: "Certificate Secret Name"
    type: string
    required: true
    description: "Name of the secret where certificate are stored"
    group: "global Settings"
  
  - variable: tls.validityDuration
    label: "Certificate Validity"
    type: int
    required: true
    default: 3650
    description: "Certificate Validity in day(s)"
    group: "global Settings"
    show_if: "tls.source=generate"

  - variable: tls.renew
    label: "Renew certificate"
    type: boolean
    default: false
    description: "Renew generated self-signed certificate"
    group: "global Settings"
    show_if: "tls.source=generate"