version: v1.17.2
requires:
  - name: traefik
defaultConfig:
  namespace: cert-manager
  cloudDomain: "{{ .cloud.domain }}"
  internalDomain: "{{ .cloud.internalDomain }}"
  email: "{{ .operator.email }}"
  cloudflareDomain: "{{ .cloud.baseDomain }}"
scripts:
  - name: repair-certificates
    path: scripts/repair-certificates.sh
    description: Fix stuck certificates, orphaned ACME orders, and Cloudflare DNS cleanup errors
defaultSecrets:
  - key: cloudflareToken
deploy:
  phases:
    - path: upstream
      waitFor:
        name: cert-manager-webhook
        timeout: "120s"
    - path: .
  createSecrets:
    - name: cloudflare-api-token
      entries:
        api-token: cloudflareToken