questions:
- variable: identityTrustAnchorsPEM
  label: "Trust root certificate (ECDSA)"
  description: "Root certificate used to support mTLS connections between meshed pods"
  required: true
  type: multiline
  group: Identity
- variable: identity.issuer.tls.crtPEM
  label: "Issuer certificate (ECDSA)"
  description: "Intermediate certificate, rooted on identityTrustAnchorsPEM, used to sign the Linkerd proxies' CSR"
  required: true
  type: multiline
  group: Identity
- variable: identity.issuer.tls.keyPEM
  label: "Key for the issuer certificate (ECDSA)"
  description: "Private key for the certificate entered on crtPEM"
  required: true
  type: multiline
  group: Identity
- variable: identity.issuer.crtExpiry
  label: "Expiration timestamp for the issuer certificate"
  description: "This must match the expiry date in crtPEM"
  required: true
  type: string
  group: Identity