feat: Improve private PKI and Let's Encrypt config

Author: ThomasVitale

README.md

@@ -143,10 +143,10 @@ Issues configuration.
 
 | Config | Default | Description |
 |-------|-------------------|-------------|
-| `issuers.private.include` | `true` | Whether to include a ClusterIssuer for a private PKI. |
-| `issuers.letsencrypt.include` | `false` | Whether to include a ClusterIssuer for Let's Encrypt. |
-| `issuers.letsencrypt.production` | `false` | Whether to use Let's Encrypt staging (recommended for non-production environments) or production. |
-| `issuers.letsencrypt.email` | `""` | The email address that Let's Encrypt will use to send info on expiring certificates or other issues. |
+| `private_pki.include` | `true` | Whether to include a ClusterIssuer for a private PKI. |
+| `letsencrypt.include` | `false` | Whether to include a ClusterIssuer for Let's Encrypt. |
+| `letsencrypt.production` | `false` | Whether to use Let's Encrypt staging (recommended for non-production environments) or production. |
+| `letsencrypt.email` | `""` | The email address that Let's Encrypt will use to send info on expiring certificates or other issues. |
 
 </details>
 

package/config/values-schema.yml

@@ -56,18 +56,17 @@ leader_election:
   #@schema/validation min_len=1
   namespace: kube-system
 
-#@schema/desc "Issuers configuration"
-issuers:
-  #@schema/desc "Settings for default private PKI"
-  private:
-    #@schema/desc "Whether to include a ClusterIssuer for a private PKI."
-    include: true
-  #@schema/desc "Settings for Let's Encrypt."
-  letsencrypt:
-    #@schema/desc "Whether to include a ClusterIssuer for Let's Encrypt."
-    include: false
-    #@schema/desc "Whether to use Let's Encrypt staging (recommended for non-production environments) or production."
-    production: false
-    #@schema/desc "The email address that Let's Encrypt will use to send info on expiring certificates or other issues."
-    #@schema/validation min_len=5, when=lambda _, ctx: ctx.parent["include"]
-    email: ""
+#@schema/desc "Settings for the built-in, private PKI"
+private_pki:
+  #@schema/desc "Whether to include a ClusterIssuer for a private PKI."
+  include: true
+
+#@schema/desc "Settings for Let's Encrypt."
+letsencrypt:
+  #@schema/desc "Whether to include a ClusterIssuer for Let's Encrypt."
+  include: false
+  #@schema/desc "Whether to use Let's Encrypt staging (recommended for non-production environments) or production."
+  production: false
+  #@schema/desc "The email address that Let's Encrypt will use to send info on expiring certificates or other issues."
+  #@schema/validation min_len=5, when=lambda _, ctx: ctx.parent["include"]
+  email: ""