apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: acme-lets-encrypt-production
spec:
  acme:
    email: lets-encrypt@balsillie.email
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: cert-manager-secret-acme-lets-encrypt-production
    solvers:
      - dns01:
          rfc2136:
            nameserver: 10.96.244.86:53
            tsigKeyName: rndc
            tsigAlgorithm: HMACSHA256
            tsigSecretSecretRef:
              name: cert-manager-secret-tsig
              key: rndc