Serialize ClusterIssuers creation

templates/api-key-secret.yml.j2

@@ -2,13 +2,13 @@
 apiVersion: v1
 kind: Secret
 metadata:
-  name: "{{ item.provider }}-api-key"
+  name: "{{ item.dns_provider }}-api-key"
 type: Opaque
 data:
-{% if item.provider == "cloudflare" %}
+{% if item.dns_provider == "cloudflare" %}
   api-key: "{{ item.cloudflare_api_key | b64encode }}"
-{% elif item.provider == "route53" %}
+{% elif item.dns_provider == "route53" %}
   secret-access-key: "{{ lookup('hashi_vault', 'secret=clusters/route53:secret-access-key') | b64encode }}"
-{% elif item.provider == "ovh" %}
+{% elif item.dns_provider == "ovh" %}
   applicationSecret: "{{ item.applicationSecret | b64encode }}"
 {% endif %}

templates/clusterissuer.yml.j2

@@ -4,14 +4,14 @@ kind: ClusterIssuer
 metadata:
   name: {{ item.name }}
 spec:
-{% if acme_provider is defined %}
+{% if item.acme_provider is defined %}
   acme:
-{% if acme_provider == "letsencrypt" %}
+{% if item.acme_provider == "letsencrypt" %}
     email: "{{ cert_manager_acme_email }}"
     server: https://acme-v02.api.letsencrypt.org/directory
     privateKeySecretRef:
       name: {{ item.name }}-account-key
-{% elif acme_provider == "zerossl" %}
+{% elif item.acme_provider == "zerossl" %}
     server: https://acme.zerossl.com/v2/DV90
     externalAccountBinding:
       keyID: YOUR_EAB_KID
@@ -25,7 +25,7 @@ spec:
 {% endif %}
 
     solvers:
-{% for i in item %}
+{% for i in item.solvers %}
     - {{ i.solver }}:
 {% if i.solver == "dns01" %}
 {% if i.dns_provider == "cloudflare" %}
@@ -58,9 +58,11 @@ spec:
         ingress:
           class: traefik
 {% endif %}
+{% if i.domain is defined %}
       selector:
         dnsZones:
           - "{{ i.domain }}"
+{% endif %}
 {% endfor %}
 {% else %}
   selfSigned: {}