apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: le-prod-balsillie-house
spec:
  acme:
    email: le-prod.balsillie-house@balsillie.email
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: account-le-prod-balsillie-house
    solvers:
      - dns01:
          rfc2136:
            nameserver: 10.208.240.1:53
            tsigKeyName: rndc-house
            tsigAlgorithm: HMACSHA256
            tsigSecretSecretRef:
              name: tsig-keys
              key: rndc-house

---

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: le-prod-balsillie-net
spec:
  acme:
    email: le-prod.balsillie-net@balsillie.email
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: account-le-prod-balsillie-net
    solvers:
      - dns01:
          rfc2136:
            nameserver: 10.208.240.1:53
            tsigKeyName: rndc-net
            tsigAlgorithm: HMACSHA256
            tsigSecretSecretRef:
              name: tsig-keys
              key: rndc-net