# ClusterIssuer override for k8s-demand-prd-ase1 (prd demand cluster, ase1a zone).
# ClusterIssuer is a cluster-scoped resource — this file pins the issuer
# identity for this cluster so the name is auditable per-cluster.
#
# Must match the `issuerRef.name` in consuming Certificate CRs (see
# devops-helm-charts/2.0.0/templates/proxyless-grpc-cert.yaml).

issuerName: contour-demand-prd-ca-issuer
rootCASecretName: contour-demand-ca

externalSecret:
  enabled: true
  vaultPath: meesho/devops/contour/root-ca
  refreshInterval: "0"
  secretStoreRef:
    name: vault-backend
namespace: cert-manager-demand-prd