{{- if (include "kafka.createTlsSecret" .) }} {{- $replicaCount := int .Values.replicaCount }} {{- $releaseNamespace := .Release.Namespace }} {{- $clusterDomain := .Values.clusterDomain }} {{- $fullname := include "common.names.fullname" . }} {{- $ca := genCA "kafka-ca" 365 }} {{- range $i := until $replicaCount }} {{- $replicaHost := printf "%s-%d.%s-headless" $fullname $i $fullname }} {{- $altNames := list (printf "%s.%s.svc.%s" $replicaHost $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $fullname $releaseNamespace $clusterDomain) (printf "%s.%s" $replicaHost $releaseNamespace) (printf "%s.%s" $fullname $releaseNamespace) $replicaHost $fullname }} {{- $cert := genSignedCert $replicaHost nil $altNames 365 $ca }} apiVersion: v1 kind: Secret metadata: name: {{ printf "%s-%d-tls" (include "common.names.fullname" $) $i }} namespace: {{ $.Release.Namespace | quote }} labels: {{- include "common.labels.standard" $ | nindent 4 }} {{- if $.Values.commonLabels }} {{- include "common.tplvalues.render" ( dict "value" $.Values.commonLabels "context" $ ) | nindent 4 }} {{- end }} {{- if $.Values.commonAnnotations }} annotations: {{- include "common.tplvalues.render" ( dict "value" $.Values.commonAnnotations "context" $ ) | nindent 4 }} {{- end }} type: kubernetes.io/tls data: ca.crt: {{ $ca.Cert | b64enc | quote }} tls.crt: {{ $cert.Cert | b64enc | quote }} tls.key: {{ $cert.Key | b64enc | quote }} --- {{- end }} {{- end }}