Fix upstream ca name suffix issue

[kfox1111]

The cert-manager upstream authority incorrectly suffixes '-ca' onto the name when specified.

Partially fixes: https://github.com/spiffe/helm-charts-hardened/issues/358