# When you rotate tls cert for example via Gardner service, content of secret is overwritten. Therfore original secret
# holding tls cert/key and **additional** cacert property generated by helper job will be deleted!
# Istio Gateway allows to use separate secret with the same name as secret holding tls cert&key but with `-cacert` suffix
# This secret holds client CA and it's generated by helper job mentioned below.
apiVersion: v1
data:
  "cacert": "" # This value is populated by Application Connectivity Certs Setup Job (resources/application-connector/templates/certs-setup-job.yaml) or Compass Runtime Agent
kind: Secret
metadata:
  name: kyma-gateway-certs-cacert
  namespace: istio-system
type: Opaque
