{{- $privateKeySecret := .Values.privateKeySecret -}}
{{- $existingSecret := dict -}}
{{- if $privateKeySecret.name }}
{{- $existingSecret = lookup "v1" "Secret" (include "regional-server.namespace" .) $privateKeySecret.name -}}
{{- end }}
{{- if and (eq .Values.global.cloudProvider "alicloud") $privateKeySecret.name $privateKeySecret.tlsKey $privateKeySecret.tlsCrt (not $existingSecret) }}
apiVersion: v1
kind: Secret
metadata:
  name: {{ $privateKeySecret.name }}
  namespace: {{ include "regional-server.namespace" . }}
  annotations:
    "helm.sh/resource-policy": keep
type: kubernetes.io/tls
data:
  tls.key: {{ $privateKeySecret.tlsKey }}
  tls.crt: {{ $privateKeySecret.tlsCrt }}
{{- end }}