apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: acme-{{ item.provider }}-{{ item.environment }}
spec:
  acme:
    email: {{ item.email }}
    server: {{ item.url }}
    privateKeySecretRef:
      name: cert-manager-secret-acme-{{ item.provider }}-{{ item.environment }}
    solvers:
      - dns01:
          rfc2136:
            nameserver: {{ cert_manager_dns_address }}:{{ cert_manager_dns_port }}
            tsigKeyName: {{ cert_manager_tsig_keyname }}
            tsigAlgorithm: {{ cert_manager_tsig_algo }}
            tsigSecretSecretRef:
              name: cert-manager-secret-tsig
              key: {{ cert_manager_tsig_keyname }}