plugin-barman-cloud helm chart exposes value to set the name of the cert issuer, but doesnt actually use it when rendering the certificate resources.

[d4rkfella]

I was trying to configure the helm chart to use my own cluster issuer instead of the self signed one. I saw in default values it exposes "issuerName" in the certificates block but currently its not used when templating the cert resources. It would be nice to make it possible to configure a custom issuer/clusterIssuer to use for the client/server certs.

[dosubot]

This is a confirmed issue and has been reported before in issue #781 [1], which is also marked as a blocker. The certificate.issuerName value is defined in values.yaml [2] but the Certificate templates hardcode the issuer reference to {{ include "plugin-barman-cloud.fullname" . }}-selfsigned-issuer [3] [4], completely ignoring the user-provided value. The chart also always creates a SelfSigned Issuer resource [5] regardless of configuration.

There are several open PRs attempting to fix this:

• PR #811 — Adds a createIssuer boolean and wires issuerName to the templates [6]
• PR #737 — Fixes issuerName to actually be used [7]
• PR #749 — Makes issuer creation conditional [8]

None of these have been merged yet as of today.

To reply, just mention @dosu.

---

Share context across your team and agents. Try Dosu.